You can make your site secure by running it over HTTPS, which stands for Hypertext Transfer Protocol Secure.
Using https protects the integrity and confidentiality of your user’s data.
Here are some reasons why this is important:
- HTTP is an insecure protocol, which means everything that is sent between the browser and your server is in plain text and readable by anyone tapping the internet connection. This could be a government agency (eg. NSA, …) or someone using the same free unencrypted free WIFI hotspot as your user.
- HTTPS on the other hand encrypts the communication between the browser and the server. As such nobody can listen to your users “conversations”. A https certificate for a website also proves that users communicate with the intended website and not a fake website run by malicious people.
- Since the summer of 2014, Google has publicly said that having a https site can give a ranking boost in the search engine results.
- Google’s Chrome browser will start to mark http websites as insecure in the near future
When you would only use https for eg. a login into a forum or a credit card detail information page, your website is still ‘leaking’ sensitive information hackers can use.
More in detail this could be a session identifier or cookies which are typically set after a login. The hacker could reuse this information to hijack the users session and being effectively logged in without knowing any password.
In October 2010 the Firesheep plugin for the Firefox browser was released which intercepted unencrypted cookies from Twitter and Facebook, forcing them to go https everywhere.
We also recommend to only offer an https version of your site and redirect any users accessing the http version to the secure version.
Now continue with Part 2 of our HTTPS Everywhere series, where we will explain which https certificate you should buy for your site!
I started my first website Wim's BIOS (https://www.wimsbios.com) back in 1996 as a hobby. Wim’s BIOS is still the internet premier source for finding BIOS Updates.
More then 15 years later this technology site keeps going strong with thousands of visitors every day.
My book "Fast, Scalable and Secure Webhosting" will show you how to set up your server using Linux, Nginx, MariaDB, PHP-FPM, Java, IPv6, HTTPS, HTTP/2, WordPress and much more!
Latest posts by Wim Bervoets (see all)
- Google PageSpeed Insights: Scoring 100/100 with WordPress - August 2, 2016
- Enabling SSL – HTTPS on a CDN (HTTPS Everywhere Series – Part 6) - May 11, 2016
- Getting an A+ grade on SSLLabs.com (HTTPS Everywhere Series – Part 5) - May 9, 2016
Share this Post