Securing your website

We’ve now reached a tipping point as the web moves from http (non-secure transmission) to https (secure transmission). Over half of the web is now encrypted meaning that if your site is not protected by a SSL/TLS certificate, you’re the exception rather than the norm.

There are big advantages for your business when you move to HTTPS:

  • Increases user trust (privacy concerns)
  • Faster loading times (if coupled with HTTP/2)
  • Possible increases in SEO ranking

Is your site already secure? It’s simple to check your site:

  1. Enter https://yourwebsiteaddress into Google Chrome
  2. Look at the icon to the left of the website address

If you are not secure, then you can follow these high level steps to move your site from http to https:

  1. Get cert from Lets Encrypt
  2. Install and enable cert for your website
  3. Install and enable certificate auto renewals with certbot
  4. Add server-side 301 redirect so all http traffic goes to https
  5. Verify website pages work as expected
  6. Fix mixed-content errors
  7. Add HSTS header to save browsers redirecting
  8. Add new https URL in Google Search Console

If you need any help moving your site to HTTPS, please email me.

Glen Scott

I’m a freelance software developer with 18 years’ professional experience in web development. I specialise in creating tailor-made, web-based systems that can help your business run like clockwork. I am the Managing Director of Yellow Square Development.

More Posts

Follow Me:
TwitterFacebookLinkedIn

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.