What is SSL? Why your website(s) need to have it this year

staff All Members, Non Members 0 Comments

In plain English, SSL is short for Secure Sockets Layer and is the standard security technology for establishing an encrypted link between a web server and a browser to avoid interception by hackers. Encryption means to convert information or data into a code, especially to prevent unauthorized access. A website that uses SSL encryption has a padlock next to their domain name in the browser’s address bar.

Why is SSL important?

SSL is primarily used to keep sensitive information encrypted so only the intended recipient can understand it. Without SSL, any computer between you and the server can see your usernames, passwords, credit card numbers and other sensitive information.

SSL provides authentication and trust between websites and users.

2017 is going to be probably the most secure year for website owners because Google released updates to force people to get site SSL ready. In the coming year, Google’s browser (Chrome 56) will begin to show warning message as “Not Secure” to all HTTP sites to make the web safer and secure (less hackable) place.  They:

  • have stated that sites on a secure connection will rank higher in organic search results.
  • have also moved almost all their services to HTTPS encryption by default.
  • is ready to show HTTP pages as “not secure” with a red exclamation mark pn their Google Chrome browser
  • have suggested that AdSense publishers to be secured with HTTPS to serve SSL-compliant ads.

iOS Apps will require HTTPS connections by January 1, 2017.

In a bit more detail…

HTTPS as a ranking Signal
Security is always a top priorib,’ for Google. That is why Google has urged websites to move over HTTPS in-return Google will push them in organic results. Even Google has moved its
almost services over strong HTTPS encryption by default. Source: https://webmaster.googleblog.com/2014/08//https-as-a-ranking-signal.html 

SSL and Google AdSense Publishers
Google has suggested websites to be secured With HTTPS to serve ssL«rnpliant ads (containing NT-res URLs). HTTPS enabled sites require that all content on the page, including the ads, be For most users, AdSense ad requests are always SSL-compliant and always served over HTTPS. Source: https://support-google.com/adsense/answer/10528

HTTP pages as “Not Secure”
To give users more secure environment & make internet safer Google Chrome is ready to show HTTP pages as ‘Not Secure’ With red exclamation mark in Incognito (Private) mode. Sites that collect the sensitive data over HTTP Pages will be marked as nonsecure from the beginning of January 2016 (Chrome v56). Sources: https://www.chromium.org/Home/chromium-security/marking-http-as-non-secure | https://security.googleblog.com/2016/09/moving-towards-more-secure-web.html

IOS APP will require HTTPS connections
Apple has set deadline for all apps in its App Store to switch on an important security feature called App Transport Security January I, 2017. This is a great deal of real security to users and the communications of the app over the Network. Source: https://techcrunch.com/2016/06/14/apple-will-require-https-connections-for-ios-apps-by-the-end-of-2016

SSL for the SEO boom
As per the report HITPS is a strong correlation with first page Google rankings especially after the Google’s announcement of HTTPS as a ranking signal. This will give Very small boost in ranking but it is still very effective in a competitive market. Sources: https://ahrefs.com/blog/ssl | http://backlinko.com/search-engine-ranking

MICROSOFT on SHA1 certificate
Along with many big names in the industry, Microsoft now in mood to Stop supporting the old SHA1 certificate. SSL certificate supporting old methodology will require moving on strong. Source: https://bIogs.windows.com/msedgedev/2016/04/29/shaI -deprecation-roadmap

MOZILLA is disparaging Non-secure HTTP
After the robust discussion on community mailing lists, Mozilla is intended to deprecate HTTP connection as an insecure. In the future, Mozilla can remove Or limit some features for the unencrypted sites so it is better to move HTTPS. Source: https://blog.mozilla.org/security/2015/04/30/deprecating-non-secure-http 

The Myth that SSL slows things down
Traditionally many people have myth in their mind that HITPS connection introduces too much overhead but it can be even faster if you have optimized your website properly. Even Google can serve 38000 search queries per second over SSL HTTPS. Sources: https://www.httpvshttps.com | https://blogs.sap.com/2013/06/23/whos-afraid-of-ssl | https://www.google.com/insidesearch/howsearchworks/thestory/index.html

Say goodbye to geolocation over HTTP
Google chrome has ended supporting geolocation over http connection from its SO version. Location data is sensitive and the websites interested to access geolocation of the users, will
require having HTTPS. Source: https://wwwyoutube.com/watch?v—e6DUrH56g14 

SSL-oriented development
Not only geolocation but also websites interested to have useful features like, Push Notification getuserMedia(), and HTTPÆ, are only available over HTTPS in Chrome. Moreover, AppCache and EME (Encrypted Media Extensions) soon to be removed in Chrome. Source: https://www.youtube.com/watch?v:e6DUrH56g14

In Summary

Moving towards SSL is helpful for your business to increase trust, authenticity, search traffic, etc. Website secured with SSL protects the data, and credibility traveling between two ends. It confirms the authenticity of website and domain ownership.