Topic-icon Any alternative to using an SSL certificate for canvas app ?

Active Subscriptions:

None
Hi,

I am configuring JFBconnect and I want to use the JFBRequest feature in my site....for which apparently, as I understand it, I NEED to setup the canvas app and the tabs app (Pls correct me if I am wrong).

Now setting up a canvas app or tabs app needs me to have SSL certificate installed on my server due to a FB requirement....which in turn needs me to have a dedicated IP in my shared hosting environment. The cost of the IP + the cost of a good trusted SSL is kind of prohibitive for the simple, social, non-profit website I am making. There are no online payments nor any transmission of any sensitive data involved in my site.

My questions are -

1. Can I set up JFBRequest without bothering about buying an IP and a SSL cert ?

2. If not, is there an alternative / service that i can use for using JFBRequest without having to buy the above ?

3. Is it possible to use services like FBSSL ( fbssl.co/ ) or maybe Dropbox ( www.wpcode.net/fb-app-dropbox.html/ ) to setup JFBRequest ? If yes, can you please let me know how to set them up with JFBConnect ?

Thanks,

Sean.
The topic has been locked.
Active Subscriptions:

None
And here's an article I found on How to bypass the FB SSL requirement by using a htaccess redirect - apparentetch.com/2011/11/bypassing-faceb...-apps-and-page-tabs/

Is this possible for setting up JFBRequest ?

Thanks.
The topic has been locked.
Support Specialist
Seansin,
Facebook requires the SSL connection for Canvas apps, which is then required for Requests. The fbssl and dropbox solutions you mentioned likely won't work as that's just a place to host your content (static webpages, let's say). I don't believe it really 'communicates' with your site, so JFBConnect wouldn't be operating at all in that environment.

The .htaccess trick *may* work, but I've never tried or heard of that idea before. It's worth a shot, but no guarantees or ideas if that will work.

Beyond that, then yes, you will need a dedicated IP address and SSL certificate. A Facebook app can only work on one domain, so using the 'shared' SSL certificate from your hosting company will not work as that will be under a different domain. Facebook will detect the different domain and throw and prevent sending any information securely, which JFBConnect needs to properly setup the page, manage requests, etc.

As for a dedicated IP address, I believe HostMonster's rates are about $2/month and an SSL certificate can be had for as little as $12-$20/year. I don't know anything about your budget or needs, but unfortunately, I don't have many better options for you other than trying the .htaccess trick and, as a fallback, investing <$50 / year in a true SSL certificate solution.

Hope that helps explain, but if you have any other questions, just let us know!

Thanks,
Alex
The topic has been locked.