Enforcing SSL
FAQ: Enforcing SSL for Your White-Label Domain
1. What is SSL, and why is it important?
SSL (Secure Sockets Layer) is a security protocol that creates an encrypted link between a user's web browser and your website's server. This encryption ensures that all data passed between them remains private and secure.
Importance: It's crucial for protecting sensitive information like login details, personal data, and payment information from being intercepted. Using SSL (HTTPS) builds trust with your users, protects data, and is favored by search engines.
Best Practice: It is strongly recommended to enforce HTTPS (SSL) across all pages of your website for consistent security and user experience.
2. How can I enforce SSL for my white-label domain with Memzo?
You have two primary options for enforcing SSL on your custom white-label domain used with Memzo:
Option A: Use Cloudflare (if you are already using it for DNS management).
Option B: Use Memzo's built-in Custom SSL feature.
Option A: Enforcing SSL Using Cloudflare
If your domain's DNS is managed through Cloudflare, you can configure SSL settings there.
3. How do I enforce SSL using Cloudflare?
Log in to your Cloudflare account.
Select the domain you've configured for Memzo white-labeling.
Navigate to the SSL/TLS tab.
Go to the Overview sub-tab. Choose your SSL/TLS encryption mode:
Flexible: Encrypts traffic between the browser and Cloudflare (Not recommended as traffic to your origin server isn't encrypted).
Full: Encrypts traffic end-to-end, but Cloudflare doesn't validate your origin server's SSL certificate.
Full (Strict): Encrypts traffic end-to-end, and Cloudflare validates your origin server's SSL certificate (Most Secure - Recommended if your origin supports it, which Memzo's Custom SSL does). Note: If using Memzo's Custom SSL alongside Cloudflare, 'Full (Strict)' is generally compatible.
Navigate to the Edge Certificates sub-tab.
Enable the "Always Use HTTPS" option. This automatically redirects all http:// requests to https://.
(Optional but Recommended) Enable "HTTP Strict Transport Security (HSTS)" for added security after confirming HTTPS works correctly.
4. What are the benefits of using Cloudflare for SSL?
Provides free Universal SSL certificates, automatically provisioned and renewed.
Offers additional security features like DDoS mitigation and a Web Application Firewall (WAF).
Includes performance benefits through its global Content Delivery Network (CDN) and caching.
5. Do I need a separate SSL certificate if I use Cloudflare?
No, Cloudflare's Universal SSL provides the necessary certificate automatically for traffic passing through their network.
6. How can I verify that SSL is working via Cloudflare?
Visit your website using https://yourdomain.com. Look for the padlock icon in your browser's address bar.
Use online SSL checker tools to analyze the configuration.
7. What if I have issues with Cloudflare SSL?
Double-check your SSL/TLS settings (Encryption Mode, Always Use HTTPS) in Cloudflare.
Ensure your DNS records in Cloudflare point correctly to the Memzo-provided IP/target.
Check the Cloudflare documentation or contact Cloudflare support for specific issues.
Option B: Enforcing SSL Using Memzo's Custom SSL
This is the integrated solution provided directly by Memzo for white-label users.
8. How does Memzo's Custom SSL work?
It's designed to be automatic after you configure your domain:
Add Your Server IP: Ensure you have correctly added your server's IP address in your Memzo white-label settings as per instructions given in Domains Integration
Automatic Provisioning: Once the IP is recognized and your DNS is pointing correctly, Memzo automatically provisions, installs, and configures an SSL certificate for your custom domain.
Verification: The SSL certificate installation and verification process begins automatically.
9. How long does Memzo's Custom SSL take to activate?
Verification typically completes within 2 hours.
However, due to DNS propagation (how changes spread across the internet), it can sometimes take up to 24 hours for the secure connection to be active everywhere.
10. What are the benefits of using Memzo's Custom SSL?
Simplicity: No manual SSL certificate purchase, installation, or renewal needed.
Automatic: SSL is provisioned and configured automatically by Memzo.
Integrated: Designed specifically for the Memzo white-label setup.
Secure: Ensures encrypted traffic for your users.
11. Do I need to purchase SSL certificates separately with Memzo's Custom SSL?
No, the SSL certificate is included and managed automatically as part of the Memzo white-label service.
12. How can I verify Memzo's Custom SSL is working?
Wait for the activation period (allow up to 24 hours).
Visit your website using https://yourdomain.com. Check for the padlock icon in the browser's address bar.
Use online SSL checker tools if needed.
13. What should I do if Memzo's Custom SSL isn't working after 24 hours?
Double-check that your domain's DNS records are correctly pointing to the Memzo IP/target.
Confirm the IP address was added correctly in your Memzo settings.
Contact Memzo support for assistance. We can investigate and resolve any SSL issues related to our system.
Last updated