I have a couple domains that I want to convert to SSL so they can support Alexa requests. Can anyone recommend the cheapest/easiest place to buy an SSL Cert from, that Amazon will treat as being valid? My only requirement is that it work correctly with Alexa, I don't require any other options, wildcards, etc. Just one domain, cheap and easy. Thanks :)
I just posted a Lambda Function in another thread whose sole purpose is to pass through to another endpoint. I haven't timed it to see what latency it introduces, but the first 1,000,000 hits on Lambda are free, you don't need an SSL certificate for it, and this technique can call your function no matter where it is, http or https. I'm not sure I'd want to run a professional service that way. (Since it only saves you the cost of a SSL cert.) But just putting it out there in case that helps.
That is definitely an interesting idea, I hadn't considered using lambda as a 'proxy'. I wonder if that violates any terms or anything? Because then the JSON data is flying through the air unencrypted, not sure if Amazon intended that. In any case, thanks for the tip, that's definitely a way to go for now, at least. Eventually I want to get "real" SSL working on my server, but this is a good work-around.
Well, from Amazon's point of view, using a Lambda "proxy" (I like that description) clocks up time on TWO Amazon services. So they win! :-) Also, sure, it may be unencrypted, but its going on within a single Amazon data center. So the risk should be minimal. Also, you can always use https, just you don't need a super-paranoid-certificate.
Hi Matt, I'd check with your domain registrar as many are offering free non-wildcard SSL certs for their customer's domains. I personally use Gandi for the majority of domains - they aren't the cheapest registrar and but do provide free certs that I can confirm work with Alexa:
Ah, so is Host Gator your registrar then too? If so, you could either buy an SSL cert from a separate company, or, transfer your domain to a registrar that provides free certs with each domain. If the former, and you don't want to transfer your domain, then Gandi charge $16 per year: