{"id":426,"date":"2015-10-29T02:35:49","date_gmt":"2015-10-29T02:35:49","guid":{"rendered":"https:\/\/www.sebastianlenton.com\/?p=426"},"modified":"2015-10-30T15:19:00","modified_gmt":"2015-10-30T15:19:00","slug":"why-your-website-needs-https","status":"publish","type":"post","link":"https:\/\/www.sebastianlenton.com\/2015\/10\/why-your-website-needs-https\/","title":{"rendered":"Why your website needs to use HTTPS"},"content":{"rendered":"<p>I recently did something I&#8217;ve been meaning to do for a while: I set up my website to use HTTPS. Whilst previously HTTPS was often considered a &#8220;nice to have&#8221; by web developers working outside of sectors such as banking and retail, we&#8217;ve now reached a point where it\u2019s essential for all types of website to use it.<\/p>\n<p>HTTPS is the secure version of the HTTP protocol, used by web browsers and devices to communicate with the servers on which websites are hosted. If you visit a website with an address starting with &#8220;http:\/\/&#8221;, that website is using the standard version of the HTTP protocol. Any interactions you have with that website will be transmitted across the internet as plain text, readable by anyone who might be monitoring the connection.<\/p>\n<p>If you visit a website which has an address beginning with &#8220;https:\/\/&#8221; (or, you can see a padlock symbol in your browser&#8217;s address bar) then that site is using HTTPS, the secure version of HTTP. This means that all data sent between the web browser and the server is encrypted. Anyone monitoring your connection would see a random stream of letters and numbers, practically impossible to decode.<\/p>\n<p>But what are the implications of this, and why is it so important that your website uses HTTPS today?<\/p>\n<p><!--more--><\/p>\n<h3>HTTPS is essential for the security of your website, business and customers<\/h3>\n<p>Any of the following can happen when visiting a website that doesn\u2019t use HTTPS:<\/p>\n<ul>\n<li>Any interactions taking place on that website can be eavesdropped as plain text, and stolen. This includes usernames and passwords (not just those belonging to customers, but also the login details for your company\u2019s Content Management System), enquiries sent via a contact form, the URLs and content of pages currently being looked at by individual visitors, and more. Businesses that still use HTTP for their websites not only risk the security of their customers, they risk their own security too.<\/li>\n<li>HTTP Websites can be modified during transmission over the network. This enables hackers to redirect visitors to other places, commit phishing attacks, inject malware into the page and more, plus there have also been cases of <a href=\"http:\/\/techcrunch.com\/2012\/04\/06\/now-you-know-hotels-inject-banner-ads-into-the-wi-fi-they-charge-you-for\/\" target=\"_blank\">hotel wi-fi networks<\/a> and <a href=\"http:\/\/arstechnica.com\/tech-policy\/2013\/04\/how-a-banner-ad-for-hs-ok\/\" target=\"_blank\">unscrupulous ISPs<\/a> injecting ads into websites accessed via their networks. Do you really want to risk grubby, invasive adverts being plastered across your shiny new company website?<\/li>\n<\/ul>\n<p>Both of the above issues, and more besides, can be mitigated by asking your web developer or agency to set up your website to use HTTPS.<\/p>\n<h3>HTTPS is now used as a ranking signal by search engines<\/h3>\n<p><a href=\"http:\/\/googlewebmastercentral.blogspot.co.uk\/2014\/08\/https-as-ranking-signal.html\" target=\"_blank\">Google announced more than a year ago<\/a> that it had started using HTTPS as a ranking signal. This means that websites that use HTTPS will have an SEO advantage over those that don&#8217;t. While Google currently states that HTTPS on its own doesn&#8217;t have a large impact, it&#8217;s practically certain that over time the influence of HTTPS on search rankings will increase. Because&#8230;<\/p>\n<h3>The internet as a whole is moving towards &#8220;HTTPS everywhere&#8221;<\/h3>\n<p>As well as using HTTPS as a search engine ranking signal, <a href=\"https:\/\/www.youtube.com\/watch?v=cBhZ6S0PFCY\">Google stated it wants &#8220;HTTPS Everywhere&#8221;<\/a> during the Google I\/O conference in 2014. Mozilla has said that <a href=\"https:\/\/blog.mozilla.org\/security\/2015\/04\/30\/deprecating-non-secure-http\/\" target=\"_blank\">it intends to phase out support for HTTP<\/a> in their Firefox browser. Cutting-edge features appearing in the latest browsers are increasingly only available to HTTPS sites. And, the internet as a whole is moving towards the new ultra-fast HTTP\/2 protocol, but <a href=\"http:\/\/resources.infosecinstitute.com\/http2-faster-and-safer-web-enforcing-strong-encryption-as-the-de-facto-standard\/\" target=\"_blank\">HTTP\/2 is currently only available to websites that use HTTPS<\/a>.<\/p>\n<h3>Without HTTPS, you may lose the trust of your customers<\/h3>\n<p>In a post-Snowden world, computer security and privacy issues are mainstream news, and consequently internet users are becoming increasingly savvy about their own privacy. When visiting a website that uses HTTPS, a padlock symbol (often green) is displayed in the browser address bar. This indicates (rather more prominently than the &#8220;https&#8221; in the URL itself) that the website is using HTTPS.<\/p>\n<p>And as time goes by, more and more people will look for this symbol in order to assure themselves that your business is serious about the integrity and security of their data. And if they don&#8217;t see it, they may not trust you with their custom. If you\u2019ve asked yourself the question \u201cDoes my website need https?\u201d then the answer is now yes.<\/p>\n<h2>Enable HTTPS on your website now<\/h2>\n<p>Hopefully you now understand how important HTTPS is to your website, and by extension your business. And it&#8217;s important to get this set up now, as the reasons to do so will only become more pressing as time goes by. More and more websites are now adopting HTTPS &#8211; perhaps including your competitors\u2019 &#8211; so don&#8217;t get left behind.<\/p>\n<p>Enabling HTTPS on your website isn&#8217;t a straightforward process: it involves purchasing an SSL\/TLS cert from a certificate authority, which then has to be installed on your website&#8217;s server. There are also sometimes configuration and technical changes, which may need to be made by a web developer, depending on circumstances.<\/p>\n<p>If you would like to enable HTTPS on your website and are looking for a freelance web developer to implement it, then <a href=\"\/contact\">please drop me a line<\/a> and I&#8217;ll get back to you with a quote.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I recently did something I&#8217;ve been meaning to do for a while: I set up my website to use HTTPS. In my opinion, HTTPS is now essential for all types of website- not just banking, retail or big business. In this post I explain the benefits of enabling HTTPS, including better security for your customers and organisation, SEO benefits and more.<\/p>\n","protected":false},"author":2,"featured_media":427,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.4 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Why your website needs to use HTTPS - Sebastian Lenton<\/title>\n<meta name=\"description\" content=\"In this post, I explain why you need to upgrade your organisation&#039;s website to use HTTPS. Reasons include security, SEO and more.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.sebastianlenton.com\/2015\/10\/why-your-website-needs-https\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Why your website needs to use HTTPS - Sebastian Lenton\" \/>\n<meta property=\"og:description\" content=\"In this post, I explain why you need to upgrade your organisation&#039;s website to use HTTPS. Reasons include security, SEO and more.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.sebastianlenton.com\/2015\/10\/why-your-website-needs-https\/\" \/>\n<meta property=\"og:site_name\" content=\"Sebastian Lenton\" \/>\n<meta property=\"article:published_time\" content=\"2015-10-29T02:35:49+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2015-10-30T15:19:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.sebastianlenton.com\/wp-content\/uploads\/2015\/10\/pile-o-keys1-1469843.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"3264\" \/>\n\t<meta property=\"og:image:height\" content=\"2448\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Seb Lenton\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@sebastianlenton\" \/>\n<meta name=\"twitter:site\" content=\"@sebastianlenton\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Seb Lenton\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.sebastianlenton.com\/2015\/10\/why-your-website-needs-https\/\",\"url\":\"https:\/\/www.sebastianlenton.com\/2015\/10\/why-your-website-needs-https\/\",\"name\":\"Why your website needs to use HTTPS - Sebastian Lenton\",\"isPartOf\":{\"@id\":\"https:\/\/www.sebastianlenton.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.sebastianlenton.com\/2015\/10\/why-your-website-needs-https\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.sebastianlenton.com\/2015\/10\/why-your-website-needs-https\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.sebastianlenton.com\/wp-content\/uploads\/2015\/10\/pile-o-keys1-1469843.jpg\",\"datePublished\":\"2015-10-29T02:35:49+00:00\",\"dateModified\":\"2015-10-30T15:19:00+00:00\",\"author\":{\"@id\":\"https:\/\/www.sebastianlenton.com\/#\/schema\/person\/07ad65c2a7050417b92f404e980c3be1\"},\"description\":\"In this post, I explain why you need to upgrade your organisation's website to use HTTPS. Reasons include security, SEO and more.\",\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.sebastianlenton.com\/2015\/10\/why-your-website-needs-https\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.sebastianlenton.com\/2015\/10\/why-your-website-needs-https\/#primaryimage\",\"url\":\"https:\/\/www.sebastianlenton.com\/wp-content\/uploads\/2015\/10\/pile-o-keys1-1469843.jpg\",\"contentUrl\":\"https:\/\/www.sebastianlenton.com\/wp-content\/uploads\/2015\/10\/pile-o-keys1-1469843.jpg\",\"width\":3264,\"height\":2448},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.sebastianlenton.com\/#website\",\"url\":\"https:\/\/www.sebastianlenton.com\/\",\"name\":\"Sebastian Lenton\",\"description\":\"Freelance web development &amp; design, Birmingham UK\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.sebastianlenton.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.sebastianlenton.com\/#\/schema\/person\/07ad65c2a7050417b92f404e980c3be1\",\"name\":\"Seb Lenton\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Why your website needs to use HTTPS - Sebastian Lenton","description":"In this post, I explain why you need to upgrade your organisation's website to use HTTPS. Reasons include security, SEO and more.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.sebastianlenton.com\/2015\/10\/why-your-website-needs-https\/","og_locale":"en_GB","og_type":"article","og_title":"Why your website needs to use HTTPS - Sebastian Lenton","og_description":"In this post, I explain why you need to upgrade your organisation's website to use HTTPS. Reasons include security, SEO and more.","og_url":"https:\/\/www.sebastianlenton.com\/2015\/10\/why-your-website-needs-https\/","og_site_name":"Sebastian Lenton","article_published_time":"2015-10-29T02:35:49+00:00","article_modified_time":"2015-10-30T15:19:00+00:00","og_image":[{"width":3264,"height":2448,"url":"https:\/\/www.sebastianlenton.com\/wp-content\/uploads\/2015\/10\/pile-o-keys1-1469843.jpg","type":"image\/jpeg"}],"author":"Seb Lenton","twitter_card":"summary_large_image","twitter_creator":"@sebastianlenton","twitter_site":"@sebastianlenton","twitter_misc":{"Written by":"Seb Lenton","Estimated reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.sebastianlenton.com\/2015\/10\/why-your-website-needs-https\/","url":"https:\/\/www.sebastianlenton.com\/2015\/10\/why-your-website-needs-https\/","name":"Why your website needs to use HTTPS - Sebastian Lenton","isPartOf":{"@id":"https:\/\/www.sebastianlenton.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.sebastianlenton.com\/2015\/10\/why-your-website-needs-https\/#primaryimage"},"image":{"@id":"https:\/\/www.sebastianlenton.com\/2015\/10\/why-your-website-needs-https\/#primaryimage"},"thumbnailUrl":"https:\/\/www.sebastianlenton.com\/wp-content\/uploads\/2015\/10\/pile-o-keys1-1469843.jpg","datePublished":"2015-10-29T02:35:49+00:00","dateModified":"2015-10-30T15:19:00+00:00","author":{"@id":"https:\/\/www.sebastianlenton.com\/#\/schema\/person\/07ad65c2a7050417b92f404e980c3be1"},"description":"In this post, I explain why you need to upgrade your organisation's website to use HTTPS. Reasons include security, SEO and more.","inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.sebastianlenton.com\/2015\/10\/why-your-website-needs-https\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.sebastianlenton.com\/2015\/10\/why-your-website-needs-https\/#primaryimage","url":"https:\/\/www.sebastianlenton.com\/wp-content\/uploads\/2015\/10\/pile-o-keys1-1469843.jpg","contentUrl":"https:\/\/www.sebastianlenton.com\/wp-content\/uploads\/2015\/10\/pile-o-keys1-1469843.jpg","width":3264,"height":2448},{"@type":"WebSite","@id":"https:\/\/www.sebastianlenton.com\/#website","url":"https:\/\/www.sebastianlenton.com\/","name":"Sebastian Lenton","description":"Freelance web development &amp; design, Birmingham UK","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.sebastianlenton.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/www.sebastianlenton.com\/#\/schema\/person\/07ad65c2a7050417b92f404e980c3be1","name":"Seb Lenton"}]}},"_links":{"self":[{"href":"https:\/\/www.sebastianlenton.com\/wp-json\/wp\/v2\/posts\/426"}],"collection":[{"href":"https:\/\/www.sebastianlenton.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.sebastianlenton.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.sebastianlenton.com\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.sebastianlenton.com\/wp-json\/wp\/v2\/comments?post=426"}],"version-history":[{"count":0,"href":"https:\/\/www.sebastianlenton.com\/wp-json\/wp\/v2\/posts\/426\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.sebastianlenton.com\/wp-json\/wp\/v2\/media\/427"}],"wp:attachment":[{"href":"https:\/\/www.sebastianlenton.com\/wp-json\/wp\/v2\/media?parent=426"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.sebastianlenton.com\/wp-json\/wp\/v2\/categories?post=426"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.sebastianlenton.com\/wp-json\/wp\/v2\/tags?post=426"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}