If I use Cloudflare's “Full SSL”, do I need to buy another SSL certificate for Heroku?

Question

I am using Cloudflare for both my DNS and the other features they have. But I am using Heroku as my host.

I have enabled their free SSL beta , and when I browse to my site I see the https section is green like so:

I will be accepting credit card payments via Stripe on my site.

Do I still need to go get an SSL cert from a third-party provider, and upload it to Heroku or is the 'free full SSL' that Cloudflare provides sufficient?

Answer 1

You don't need (as in, not a requirement) SSL for Stripe to work. When it's properly configured, no credit card information will hit your server. That said, users care about the green lock, and they should. So as long as it shows green for you and your users, you should be fine.

More expensive SSL certificates claim their root certificates are widely accepted, some say 100%. But if your users use the most popular browsers Cloudfare's should be OK.