Facebook Apps and SSL Certificate, Know how to secure Facebook application using SSL certificate and which SSL certificate is need to secure Facebook app.

1. Facebook Apps & SSL
Certificate
Enhance Advance user Security

2. Facebook planned to Enhance better
user security
• Today, in the wake of daily Data Breaches & Cyber Attacks, everyone from
website admin to network security experts to millions of users around the
world are worried about the security of their private data. 2014 seems to
have become the year of data breaches, as millions of users’ login
credentials and sensitive information have been stolen via attacks. In the
fight against breaches, it’s all about web security.
• Social networking giant Facebook is also worried about its users’ security,
which is why, back in May 2011, they announced that every site and app has
to migrate to oAuth 2.0 by Sep 1 2011 & to HTTPS (Validation with an SSL
certificate) by Oct 1 2011.
• Basically, all Facebook applications must be secured with oAuth 2.0 and an
SSL certificate.

3. Why SSL Certificate is prerequisite for
Facebook Apps?
Every individual web platforms request their users for credentials when they
try to access any social networking websites or other websites with
credentials. However, visiting websites contain suitable SSL certificate
security installed then it would be more comfortable and flexible
environment to users for their future transactions over the web. The strong
and the toughest encryption algorithm prevent unauthorized access while
communicating any web platform through credentials on the Internet.
Facebook Application priority request user’s data such as name, email
address, birth date, etc… and all those information crucial as per user’s
perspective and user’s always believes their information security on the
priority before they involve their self into applications. Facebook has already
started its new revolution and it’s called “Each Facebook App must be
secured with HTTPS”.

4. Which SSL Certificate is required for
my Facebook App?
This question may arise in every Facebook app
developer’s mind when deciding which SSL will be best
for their app. There are many SSL certificates available
on the market, so you’ll want to make sure to choose
the right one to run your app successfully.
Selecting the perfect SSL certificate for your Facebook
application depends on the location of the directory.

5. (1) If Facebook app is in Sub Directory
If your Facebook application is located in the sub
directory
• yourdomain.com/fb-app-1
• yourdomain.com/fb-app-2
• yourdomain.com/fb-app-3
Technically, Domain Validated (DV) SSL certificates
protects any sub-directory based Facebook Application
as per security industry experts.

6. (2) If Facebook App is in Sub-Domain
If you own multiple Facebook apps and you have located all apps in sub-domains.
Such as…
• fb-app-1.yourdomain.com
• fb-app-2.yourdomain.com
• fb-app-3.yourdomain.com, etc…)
then you required a wildcard SSL Certificate as you need to protect all your
sub-domains with single certificate.
As per web security analyst, the applications located in the formation of sub-domains
were secured by COMODO positive SSL wildcard or RapidSSL
Wildcard Certificate.
Both of this Certificate Authority (CA) had already secured plenty of
Facebook Applications with hardest has an algorithm of 256 bit. They are
being trusted to all 99.99% mobile and desktops based web browsers.

7. (3) If Facebook app is with Multiple Domains
If you own multiple Facebook apps which hosted with different
names &located in different locations such of your server such
as…
• yourdomain-1.com/fb-app1
• yourdomain-2.net/fb-app2
• yourdomina-3.apps/fb-app4, etc….
then you must need an SSL which offers security of both
multiple domains & sub-domains.
Comodo UCC (Unified Communication Certificate) or Comodo
Positive Multi-domain Wildcard SSL Certificate are the perfect
choice, users allows to secure fully qualified multiple domains
and unlimited sub-domains.

8. (4) Facebook Apps that handles Transactions
If you have a Facebook application that handles
transactions and/or processes sensitive data, then we
would recommend a higher security SSL certificate
that also provides more apparent trust indicators, such
as an EV SSL Certificate.
We would suggest either a Comodo EV SSL or a
GeoTrust True BusinessID with EV SSL Certificate.

9. How do I secure my Facebook Application?
Before setting up your SSL certificate into your Facebook application, please
make sure you have completed following:
• Ensure that your new certificate has been issued by a trusted Certificate
Authority (CA). This also means that your certificate is “active.”
• Make sure you generate a CSR Code – which will come from your server.
For more information on CSR Generation and tool - click here.
• Allocate a Dedicated IP address (You app must be hosted on a dedicated
IP address) for you application
• Install SSL certificate on your server.
Here’s the SSL Certificate installation guide for Different servers and OS that
may help you to install SSL - http://bit.ly/SSL-Installation-Guide.
Once SSL certificate installation process completes, the very next process is
copy Canvas URL and Page Tab URLs.

10. Securing you Facebook Canvas URL& Page tab URL.
• First login in to your Facebook account and visit
https://developers.facebook.com.
• Click on the Apps tab and select the App that you wish to
secure
• Now click on Settings
• Here in Facebook Canvas update the Secure Canvas URL with
your server location of your application.
• Now move to Page Tab, here you need to update the secure
Page Tab URL with server location of your index file.

11. What if my Facebook App is not
secured using SSL Certificate
Facebook has already announced, every application must have
secure connection with HTTPS (validated with SSL Certificate) in
every category of applications. However, the app without
HTTPS connection will be placed into the sandbox as per
Facebook Application Guideline, and the following application
without SSL certificate will not update to live status until it
migrates to Auth 2.0 & HTTPS.

12. For More Information SSL Certificate for
Facebook Apps
Blog: cheapsslsecurity.com/blog
Facebook: CheapSSLSecurities
Twitter: SSLSecurity
Google Plus: +Cheapsslsecurity