By Sherry Bonelli / Guest Column
With all the news about Facebookâs security and privacy issues, fears of personal information being used for nefarious purposes and identity theft, people are more conscious than ever about website security.
Since June is National Safety Month, I thought weâd discuss the importance of making your website secure and why you should check to see if a site is secure before you enter personal information.
Online security isnât just important to the people who visit your website; itâs also one of Googleâs top priorities. For several years now, the tech company has been preaching the gospel of âHTTPS everywhereâ online. In fact, Googleâs popular internet browser, Chrome, recently began marking sites that arenât secure (those with an http://) with a warning.
This means that when a person visits a site that doesnât have the secure https:// in front of the URL, they will see a scary warning that essentially says the website isnât secure and therefore their information isnât safe. If your website isnât secure, many of your potential customers will likely see this ânot secureâ warning, get scared and quickly leave your site.
The bottom line: If your siteâs not secure, you could be losing business.
If you havenât made the switch to a secure site yet, protect your visitors and your business by getting a Secure Sockets Layer (SSL) certificate and migrating your website to HTTP.
What does that mean?
An SSL certificate safeguards the data your website visitors enter and ensures it will be transferred over a secure network.
HTTP (Hypertext Transfer Protocol) and HTTPS (Hypertext Transfer Protocol Secure) are both protocols, or languages, for transmitting information between computers. With HTTP, it is possible for unauthorized parties to see the âconversationâ and data between your computer or device and the website youâre visiting.
If you have an HTTPS connection, you have an extra layer of security over that conversation using the SSL/TSL protocol. That means the data is encrypted, which protects and prevents digital âeavesdropping.â It also provides authentication to ensure that the communication is only with the intended website.
Since HTTP is not secure, you should not trust a site using it with any sensitive information. HTTPS sites are secure and can be trusted.
How do I get a secure site?
First you need an SSL certificate. The easiest way to get one is to see if your current website host sells them. There are several different kinds of SSL certificates available for purchase, from Standard to EV (Extended Validation.) They all have different âfeatures,â display the level of security differently and involve different verification steps for you. Extended Validation is the highest level of security and has a strict authentication process. Regardless of which one you pick, youâll need to renew your SSL certificate every year.
Once you have purchased a certificate, install it on your siteâs server. Your hosting company may offer to do this for you, however, Iâve found that most of the time theyâll install the certificate for you, but they donât take the extra steps needed to ensure that your siteâs migration from http:// to https:// goes smoothly.
For instance, switching from a non-secure site to a secure site is just like moving a site. Why? Because all of your URLs are now different â https://yoursite.com, instead of http://yoursite.com. That means any pages with the http:// URL that are indexed by Google and found by searchers will result in an error, because those pages no longer exist. This means that you have to do some special things to make sure the site move goes well.
Google offers a guide of things to do, and pitfalls to avoid, on its Webmaster Tools site â you can find the specific page at http://bit.ly/URLmove — although itâs typically helpful to hire a professional to help with this part of the upgrade.
If you want to ensure that your site keeps up with security standards, itâs best to switch to a secure site as soon as possible. If you have any questions, youâll find a plethora of information online and at the most trusted source, Googleâs Webmaster Tools site.
Sherry Bonelli, digital marketer and presenter/speaker, is the owner of early bird digital marketing in Cedar Rapids.