How To Convert Your Site To HTTPS
Updated: Sep 6, 2021
Today, we will tell you how to offer secure browsing. Google suggests mastering the HTTPS protocol because it is a security priority for the search engine tool. Ensure visitors that they are safe when they visit your website (data protection etc).
As a result, it severely penalises any website that cannot ensure the safety of its visitors.
This is what we basically want to avoid!
That is the error message we typically wish to avoid:
1. The SSL Certificate
You will need to purchase and install an SSL certificate.
SSL is classified into three levels:
"Domain validation" certificates:
A Domain Validated SSL certificate means that the Certification Authority (CA) will just check the domain name and will not validate anything else.
SSL Certificates are granted when the CA verifies that the applicant truly owns the domain name in question.
"Organisation validation" certificates:
The CA will validate your business, and you will need to present appropriate business papers for them to do so. The certificate will include information about your firm.
When consumers click on the Secure Site Seal, this extra verified corporate information is presented to them, giving them greater insight into who is behind the site and, as a result, greater trust in the site.
"Extended validation" certificates:
CA verifies that the application has the legal and exclusive right to the specific domain name and undertakes a thorough vetting of the business (legal, physical, operational).
2. How Can You Get This Priceless ''HTTPS''?
1. Your Website Is Not Live Yet
Some CMS already include this in their plans. If you are using WordPress for example you will need to install the SSL protocol on your servers:
Let’Encrypt: SSL / TLS certificates free
You may verify with your host provider, who generally provide this service. It is essential to double-check this before selecting your host.
If you do this at the start, all of your pages will be secured.
2. Your Website Is Already Live
Go to your Wordpress general settings and choose the URL base to switch from HTTP to HTTPS
Organise 301 redirects from your old HTTP URLs to the new HTTPS URLs (the old URL existed but we want everyone to be redirected to the new one).
You can also use the ''Really simple SSL'' that will do it for you
3. What If You Have Many Internal HTTP Links?
Even if you already set up redirects, it will be easier for Google crawls and your SEO juice to have the correct link rather than having to redirect it.
You can use the ''Search and replace'' plugin to remove all references to your old HTTP URLs from your pages.
Don't forget to reconfigure all your external services based on your old protocol (Google Analytics, Search Console…) using your new property.
4. Third Party
Make sure that you are using a secure third party host (video, images...). Otherwise, your website will be perceived to be using unsecure websites.
5. Final Check
Use SSLshopper to make sure that everything is running well.