WEBSITE SECURITY - 28.10.2016

Moving from HTTP to HTTPS

Google will soon classify websites that aren’t fully protected as hazardous. Here is some advice on how SMEs and others can take steps to avoid problems.

Background. Many websites still send data over the HTTP protocol. Obviously, sensitive information - such as personal records and payment data - needs encryption as applied by the secure HTTPS (Hypertext Transfer Protocol Secure) protocol. HTTPS protects the integrity and confidentiality of the data. As of 1 January 2017, if a site is still using HTTP connections, Google will define the website as unsafe. You can check the plans in Google’sSecurity Blog Post ( https://security.googleblog.com/2016/09/moving-towards-more-secure-web.html ).

A transition roadmap. The first step to take is to get an SSL certificate that will provide the necessary security for the change from HTTP to HTTPS. GlobalSign ( https://www.globalsign.com/en/ssl-information-center/what-is-an-ssl-certificate ) gives a comprehensive explanation of exactly what an SSL certificate is and why it is necessary. Woorkup.com ( https://woorkup.com/how-to-migrate-from-http-to-https-complete-tutorial ) has a complete tutorial on how to migrate your site from HTTP to HTTPS. This also contains advice on choosing an SSL certificate and a checklist for the migration itself. Tip . If you are about to renew a website or to build a completely new one, then it makes sense to implement HTTPS directly.

Other reasons for the transition. As well as security, there are other reasons why you need to plan to move to HTTPS. The performance of the site will improve, SEO rankings can benefit and by staying on HTTP, it could be that data is not correctly shown by the Google Analytics program. Finally, clients will have more confidence in the website. All of these factors can be examined in more detail at Keycdn.com ( https://www.keycdn.com/blog/http-to-https ).

Comparison sites and costs. Check out the RapidSSLonline site ( https://www.rapidsslonline.com/uk/compare-ssl.aspx ) for a comparison of the different types of SSL certificates and their related costs. A US-based comparison site which has lots of useful information is the SSLShopper ( https://www.sslshopper ).

Use Keycdn to check why HTTPS is vital. Check Woorkup.com for a road map from HTTP and visit RapidSSLonline for costs and other info.

© Indicator - FL Memo Ltd

Tel.: (01233) 653500 • Fax: (01233) 647100

subscriptions@indicator-flm.co.ukwww.indicator-flm.co.uk

Calgarth House, 39-41 Bank Street, Ashford, Kent TN23 1DQ

VAT GB 726 598 394 • Registered in England • Company Registration No. 3599719