An Overview Of SSL Changes – What It Means For Your Website

An Overview Of SSL Changes – What It Means For Your Website

 

In today’s ever-changing digital landscape, it’s important that businesses keep up to date with Google’s best practices to make sure that they continue to be competitive in their particular online markets. With Google being the most dynamic and influential company online, it’s integral for them to keep up with all the threats and opportunities that the internet generates. Subsequently, Google releases a plethora of updates each year: new features, bug fixes, and the majority pertaining to the very secretive Google search ranking algorithm.

What’s important though, is that all online providers that use Google-related services (pretty much every online provider), are aware of pressing changes that may bear upon their SEO, performance, and ultimately their bottom-line. The internet is in a constant state of change, so online businesses must be flexible and conform with new Google updates as quickly as possible to ensure that they aren’t adversely influenced by these new releases.

The largest Google update that has recently had a bearing on online providers relates to Google Chrome v62, which was released in October of this year. The Google Chrome web browser is used by virtually half of all online users, so it’s remarkably important that online companies incorporate the specific changes as quickly as possible if they wish to prevent any damaging repercussions.

What has changed in Google Chrome v62?

In the Google Chrome v62 update, Google has modified the way in which it marks non-secured (HTTP) pages. If a non-secured (HTTP) page stores passwords and bank card information (which is stored in a plain text file), they are susceptible to phishing sites that can basically steal this information from buyers that wrongly believe they are providing their personal information to a trustworthy company. The Google Chrome browser will start marking any text input field and web address bar as ‘NOT SECURE’ for HTTP pages.

This change will obviously have an effect on millions of websites all around the world. Prior to the change, many non-secured websites weren’t impacted by phishing attacks simply because they didn’t have a public-facing member login, and employed PayPal or other offsite payment processors to accept online payments. Now, however, all websites will need to start securing their web pages due to the fact that users will become afraid of succumbing to malevolent attacks if they input their personal information into fields marked boldly as ‘NOT SECURE’.

How to make web pages secure?

For online enterprises that want to secure their previously non-secured (HTTP) web pages, they must encrypt the information being exchanged between their clients and their web server by integrating an SSL certificate. Google are obviously pushing for a more secure internet than ever before, and they’ve opted for SSL encryption as a vehicle to do this. For website owners who wish to enable HTTPS on their web servers, here is a helpful guide: https://developers.google.com/web/fundamentals/security/encrypt-in-transit/enable-https?hl=en. The following link is an additional guide on how you can avoid the ‘NOT SECURE’ warning in Google Chrome which is intended for web developers: https://developers.google.com/web/updates/2016/10/avoid-not-secure-warn.

What this means for online businesses?

The recent Google update denotes that HTTPS and SSL encryption will become the norm across all web pages on the net. Eventually, each online company will have to secure their web pages using SSL encryption whether they like it or not, or users will simply decide on a competitor that does.

What this also indicates is that not all websites using SSL encryption should be trusted, and there will be a consequential increase in phishing sites using HTTPS also. Phishing sites can simply use fabricated SSL certificates to circumvent the ‘NOT SECURE’ warning by Google Chrome and make their websites appear legit. This will make the distinction between phishing sites and real websites more challenging than ever. Online enterprises that use an Extended Validation Certificate (EV SSL) will be the most trusted websites on the web considering that it will be exceedingly difficult for phishing sites to copy the authenticity that EV SSL provides.

Making all websites use SSL certificates to verify their authenticity will only increase the number of phishing sites that do the same. At the end of the day, however, SSL encryption will inevitably become mandatory, so if you need any support in securing your website with SSL encryption, get in touch with the digital specialists at Internet Marketing Experts Wagga Wagga by calling 1300 595 013, or visit their website for more information: http://www.internetmarketingexpertswaggawagga.com.au/

 

Share this post