SSL Certificates and why we are using them
Do SSL Certificates Affect Search Rankings?
Security has always been a priority for Google and announced it was to use HTTPS as a ranking signal, so far we haven't seen much change, but it's coming.
Chrome is marking non-secure pages containing password and credit card input fields as Not Secure in the URL bar. In a way that's not surprising since Secure Certificates (SSL) have always been used/needed to encrypt and secure data transfer.
Our newly developed websites are now issued with a secure certificate
If we are developing a new website, then it's good practice to have HTTPS in place from day 1, we are also rolling that out for site built within the last 6 months.
It is a resource intensive process and there isn't a strong correlation yet between HTTPS and SEO. So although our newer sites will be issued with an SSL certificate, we do have to make a charge for older sites, which will be dependent on the size of the site.
Secure Certificate
A secure certificate is used to make sure that data can't be intercepted by anyone as it moves across the internet. If a website doesn't use an SSL or Secure Certificate, all information that passes between the web server and your computer is sent in plain text. That makes it easy to read and abuse any intercepted information using a simple man-in-the-middle attack or over a public Wi-Fi connection.
Secure Certificates are the solution and are very cheap these days. They encrypt the data before sending it over the internet where is decrypted safely at the other end.
So when you're next typing in your email address and password into your web browser, check the web address. Does it have a green padlock and "https" at the start of the address? The "s" stands for secure and if it's not there, think very hard about continuing. Perhaps even contact the owner of the website and ask them why it's not secure.
Why switch to HTTPS?
There is a lot of discussion on the internet around moving your website to HTTPS. In the past SSL certificates were saved for data entry and payments. Many web developers are still confused whether it's worth the effort to implement an encrypted certificate.
Very few in terms of percentage have made or plan to make the switch. Google has stated that if all other factors are equal, HTTPS can act as a tiebreaker in the search engine results, which is why we want to future proof our sites.
If you don't use our hosting
We take care of hosting for the vast majority of our clients and include it for free, but one or two still prefer to host their own.
You just need to buy and install a relevant SSL certificate (preferably from your hosting provider) and we can do the rest.
Steps to install a SSL Certificate and making your site secure
1. Buy and install a relevant SSL certificate, they need renewing yearly. Let's Encrypt ids offerring a free service if it is installed on your server.
2. Check all images and links for being HTTPS
3. *Use 301 redirects, your htaccess file can do this step.
4. Implement a new XML Sitemap for all the pages you need Google to index.
5. Add the new HTTPS version of your site and the Sitemap to Webmaster Tools
6. If you are using Google Analytics then set the preferred version of your site to HTTPS
*You can set up domain-wide 301 redirects from the http to the https version of your website, by adding the following code to the .htaccess file.
Note that this code is valid for websites hosted on Apache servers.
1 RewriteEngine On
2 RewriteCond %{SERVER_PORT} 80
3 RewriteRule ^(.*)$ https://www.example.com/$1 [R=301,L]
All sites being HTTPS will become more important in time
HTTPS isn''s yet a huge ranking factor for search engines right now, although it might have a greater impact later.
Google has incentivised moving to HTTPS and Chrome browsers have already started showing an unencrypted website warning for displaying an unsecured HTTP version of a webpage.