When a customer pays by PayPal, they're redirected to the paypal login page which has our site logo displayed prominently. Why, since the logo is picked up from http://domain.com/images/stories/virtuemart/vendor/image.png does the browser not give a certificate warning that the page includes unsecured content (ie from a http location, not https)?
I ask because we used to have a problem with this a long time ago and we purchased an SSL certificate for a different site on a different domain to resolve it and it's now up for renewal. I'm not quite sure what I need to test to ensure there are no problems.
Not sure why
but you do not need an SSL certificate to get your logo hosted securely.
We always hosted ours on one of a number of providers:-
Se the info from paypal:-
https://cms.paypal.com/ca/cgi-bin/?cmd=_render-content&content_ID=developer/solutions_imagehosting (https://cms.paypal.com/ca/cgi-bin/?cmd=_render-content&content_ID=developer/solutions_imagehosting)