A Guide To SSL Changes – What It Means For Your Website
In today’s ever-changing digital world, it’s imperative that companies keep up to date with Google’s best practices to make sure that they remain competitive in their respective online markets. With Google being the most dynamic and influential company on the web, it’s vital for them to keep up with all the threats and opportunities that the internet produces. For that reason, Google releases a plethora of updates yearly: new features, bug fixes, and the majority associated with the very secretive Google search ranking algorithm.
What is necessary though, is that all online businesses that use Google-related services (virtually every online organisation), recognise important changes that may have a bearing on their SEO, performance, and ultimately their bottom-line. The internet is in a continuous state of change, so online providers have to be versatile and adapt to new Google updates as soon as possible to ensure that they aren’t negatively affected by these new releases.
The biggest Google update that has recently impacted online enterprises pertains to Google Chrome v62, which was released in October this year. The Google Chrome web browser is utilised by practically 50% of all online users, so it’s highly important that online companies implement the specific changes as quickly as possible if they wish to avoid any undesirable results.
What has changed in Google Chrome v62?
In the Google Chrome v62 update, Google has modified the way in which it marks non-secured (HTTP) pages. If a non-secured (HTTP) page stores security passwords and credit card information (which is stored in a plain text file), they are vulnerable to phishing sites that can basically steal this information from consumers that wrongly believe they are providing their personal information to an authorised company. The Google Chrome browser will start marking any text input field and web address bar as ‘NOT SECURE’ for HTTP pages.
This change will surely have a bearing on millions of websites around the world. Prior to the change, many non-secured websites weren’t impacted by phishing attacks simply because they didn’t have a public-facing member login, and utilised PayPal or other offsite payment processors to accept online payments. Now, however, all websites will need to start securing their web pages because users will become hesitant of falling victim to malevolent attacks if they insert their personal information into fields marked boldly as ‘NOT SECURE’.
How to make web pages secure?
For online enterprises that want to secure their formerly non-secured (HTTP) web pages, they must encrypt the information being dispensed between their clients and their web server by incorporating an SSL certificate. Google are visibly pushing for a more secure internet than ever before, and they’ve chosen SSL encryption as a vehicle to do this. For website owners who want to enable HTTPS on their web servers, here is a useful guide: https://developers.google.com/web/fundamentals/security/encrypt-in-transit/enable-https?hl=en. The following link is an additional guide on how to avoid the ‘NOT SECURE’ warning in Google Chrome which is aimed at web developers: https://developers.google.com/web/updates/2016/10/avoid-not-secure-warn.
What this means for online businesses?
The recent Google update suggests that HTTPS and SSL encryption will become the norm across all web pages on the net. Sooner or later, each online enterprise will need to secure their web pages using SSL encryption whether they like it or not, or users will simply decide on a competitor that does.
What this also signifies is that not all websites using SSL encryption should be trusted, and there will be a consequential increase in phishing sites using HTTPS also. Phishing sites can simply use counterfeit SSL certificates to evade the ‘NOT SECURE’ warning by Google Chrome and make their websites appear genuine. This will make the distinction between phishing sites and real websites more complicated than ever. Online providers that use an Extended Validation Certificate (EV SSL) will be the most trusted websites on the net considering that it will be exceedingly difficult for phishing sites to imitate the authenticity that EV SSL provides.
Making all websites employ SSL certificates to validate their authenticity will only increase the amount of phishing sites that do the same. At the end of the day, however, SSL encryption will at some point become necessary, so if you need any assistance in securing your website with SSL encryption, speak with the digital specialists at Internet Marketing Experts Hobart by calling 1300 595 013, or visit their website for further information: http://www.internetmarketingexpertshobart.com.au