Michele has an eCommerce site and she has to buy a secure encryption certificate for https. Leo says there's free certificates at a site called LetsEncrypt that can help with this. But her ISP will have to install them. Extensive or Wildcard certs are harder and have to be bought. Leo recommends DigiCert.
Bruce wants to know if his friend's website should be using a VPN for secure web access. Leo says that he can, but the first thing web sites should be doing is running a secure site with https. Amazon uses an extended SSL certificate which has a green bar so that it's even more secure for eCommerce. Using a VPN like HotSpot VPN or Tunnel Bear can give him a secure and ecrypted tunnel to a server.