1. Welcome to DNTrade. If you want to find out about the latest domain name industry news or talk, share, learn, buy, sell, trade or develop domain names - then you've come to the right place. It's a diverse and active community, with domain investors, web developers and online marketers - and it's free! Click here to join now.
    Dismiss Notice

google SSL change 1st July 2018

Discussion in 'Web Development' started by findtim, Jun 14, 2018.

  1. findtim

    findtim Membership: VIP

    Joined:
    Dec 13, 2011
    Messages:
    7,755
    Likes Received:
    1,886
    auDA Member:
    Yes
    with the google change coming
    https://searchengineland.com/effect...ill-mark-non-https-sites-as-not-secure-291623

    many sites will fall foul of this once they find out the change, i was wondering if anyone has come up with a fee to implement this change.
    go here in CHROME to see what it looks like: https://www.dubbodentist.com.au/
    for me most of my clients sites are not ssl as they are just small static sites, cpanel now provides free ssl although when it first started it was a real pain because it dropped out and i had to revert many sites, it seems to have stabilised now.

    images are mostly the problem, the paths may be set to just http:// this is a quick and easy plugin to fix them i have used.
    https://en-au.wordpress.org/plugins/ssl-insecure-content-fixer/

    tim
     
    Bacon Farmer and Rhythm like this.
  2. snoopy

    snoopy Membership: VIP

    Joined:
    Jul 14, 2010
    Messages:
    5,430
    Likes Received:
    2,365
    Have found Let's encrypt is ok (free) and if the host provides it the setup is pretty much automatic, you do have to monitor the renewals though as settings can effect the auto renewal process (which is quarterly).

    Have noticed a lot of sites with SSL errors now where the certificate expires, little doubt due to Google's push. For most sites SSL is overkill and it is going to result in a lot of problems for sites that aren't getting regular attention from the owner. Joes Cafe or 80sVideoGameReviews does not need SSL.

    Google's concern is about losing PPC advertising revenue from non SSL sites.
     
  3. nt81

    nt81 Membership: Community

    Joined:
    Jul 22, 2013
    Messages:
    467
    Likes Received:
    53
    For those of you with Wordpress sites, the "Really Simple SSL" plugin with enabled SSL on your site globally (if you already have an SSL certificate installed) and takes less than 2 minutes to install and activate.

    https://en-au.wordpress.org/plugins/really-simple-ssl/

    For those of you wanting to ensure there is plenty of SSL coverage on your websites, there is also a META tag you can add to the HEAD section of your HTML code to make sure that any insecure resources are forced to load securely via https:// :

    Code:
    <meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests">
    Good luck in 2 weeks when Google flicks the switch.
     
    chris, DomainNames and Bacon Farmer like this.
  4. Blue Wren

    Blue Wren Membership: VIP

    Joined:
    Jan 23, 2012
    Messages:
    930
    Likes Received:
    109
    Which one is the easiest and most light-weight to implement?
    The plugin or adding the code?
     
  5. nt81

    nt81 Membership: Community

    Joined:
    Jul 22, 2013
    Messages:
    467
    Likes Received:
    53
    Really Simple SSL is the most weight and quickest SSL pulgins to install that I've come across.
     
    Blue Wren likes this.
  6. Blue Wren

    Blue Wren Membership: VIP

    Joined:
    Jan 23, 2012
    Messages:
    930
    Likes Received:
    109
    Thank you .
    Implemented very simply and easy across all my sites this afternoon. No big issues at all.
     
  7. findtim

    findtim Membership: VIP

    Joined:
    Dec 13, 2011
    Messages:
    7,755
    Likes Received:
    1,886
    auDA Member:
    Yes
    blue wren now you are with netvirtue ask them about the cpanel ssl

    tim
     
  8. nt81

    nt81 Membership: Community

    Joined:
    Jul 22, 2013
    Messages:
    467
    Likes Received:
    53
    Actually all cPanel hosting has access to free AutoSSL certificates now.

    I know that VentraIP also have it enabled on all of their hosting now you just need to switch it on it in the VIP area.

    Just ask your host to enable it for you otherwise.
     
  9. Blue Wren

    Blue Wren Membership: VIP

    Joined:
    Jan 23, 2012
    Messages:
    930
    Likes Received:
    109
    SSL implemented completely and working on ALL my sites. (WP, and a couple of noughties HTML-based sites)
     
  10. Jimboot

    Jimboot Membership: Community

    Joined:
    Sep 11, 2011
    Messages:
    216
    Likes Received:
    162
    This has been a long time coming. Make sure you have auto 301s in place for http and make sure all resources are served from https. Also make sure you setup www and non-www versions in GSC with only one 200OK and submit https sitemaps and remove http. Here's a few that will have egg on their faces :)

     
  11. nt81

    nt81 Membership: Community

    Joined:
    Jul 22, 2013
    Messages:
    467
    Likes Received:
    53
    Brownie points for spreading the message / furthering the cause but I fucking cringe at the terminology used.
     
    Jimboot likes this.
  12. Jimboot

    Jimboot Membership: Community

    Joined:
    Sep 11, 2011
    Messages:
    216
    Likes Received:
    162
    The internet is a series of toobs... yeah I know..