Thought This was Interesting: Browsers requiring HTTPS

[pir8radio 1312]

One junk email that was actually informative:

 

Welcome to the May installation of our website security newsletter! This month, we've got a step-by-step guide to help you prepare for the big change that's coming from Google in just a couple months. (If you've already heard the news, you can scroll down for the rest of the updates from our website security team.)

 

  What Is Google Changing And How Will It Impact My Website?  

 

Beginning in July, Google Chrome will start marking all http websites as "Not Secure". So if your website url starts with http:// then your website visitors will see a "Not Secure" notice like this:

 

 

Don't want your website to show as "Not Secure"? All you need to do is install an SSL certificate and switch your website to use https by default on all pages. Once you do that, your website won't show the alert--instead your visitors will see this:

 

 

Much better, right!? Here's how to make the switch:  

 

Step 1: Install an SSL certificate.

If you don't already have an SSL certificate installed on your website, you'll need to get one. You don't have to spend a lot of money to get an SSL certificate with strong encryption, Installation just takes a few minutes. To make it super-easy for you, we've created step-by-step installation guides for all the popular web server softwares.

 

Step 2: Migrate your website URLs to HTTPs.

There are a few steps you'll want to take to make sure that search engines and readers only see the https version of your website:

1. Change all links (include references to image files, stylesheets, Javascript files) to point to the https version of that url. (If you're using software like WordPress, there are plugins that will do this for you.)
2. Update your CMS settings to set https as the default url for your website.
3. Add 301 redirects to redirect each http page to the same page on https.
4. Add your https site to Google Search Console. (Click here for our step-by-step SEO guide for switching your site from http to https.)

  Optional: Set up HSTS.

HTTP Strict Transport Security (HSTS) adds an additional layer of protection to ensure that your website always uses https. It's not required, but it does offer some nice perks. For more details, check out our guide: What is HSTS and how can I implement it?

Edited May 11, 2018 by pir8radio

[Luke 42077]

Great info, thanks !