Moving to HTTPS

HTTPS Weekly

A new newsletter for regular HTTPS / SSL / TLS related news.

Regularly there are new developments with TLS, certificate issues for big sites, big news stories right down to great guides and help for migrating to HTTPS, even new tools and more. Check out the first issue here.

What happens when users load active mixed content in Chrome.

While helping a developer move their site move to HTTPS, they noticed even after fixing all the mixed content on the page, they still saw an error message that says the site was “not secure” when loaded over HTTPS.

How can we help make the process of moving to HTTPS easier?

Making the move to HTTPS is not without it’s challenges. 
From selecting a certificate, installing it, handling mixed content, fixing redirects & 3rd party links, there’s a fair amount to think about.

Just move to HTTPS already (Simplified)

Our full guide on movingtohttps.com is fairly long, and though it follows the best practices to move, it can look a little daunting.
So here’s what I think is the bare minimum needed to move as a site owner:

Don’t blame your hosting for not having migrated to HTTPS

Quite often the only one standing in front of your site moving to HTTPS is yourself rather than your hosting service.
That’s not to say they may not pose a challenge for you, but you can win even in spite of their support.

What’s the difference between DV, OV & EV SSL certificates?

What do they mean, how are they different & where can you get them?

DV / Domain Validation

Migrating a WordPress site to HTTPS

The move from HTTP to HTTPS for Wordpress is an important step but luckily a few Wordpress settings and plugins make the migration process fairly straight forward.

Migrating a Magento store to HTTPS

As a store owner, you’re responsible for securing your users connection to your site. Moving to HTTPS should really be seen as a necessary requirement for modern ecommerce, as you need to secure handling users passwords, personal details, & more so let’s get your…

Is your site showing as “Not Secure”?

The latest releases of Chrome & Firefox both now show non-HTTPS pages as not secure if they have a password field (e.g. login) or credit card fields and similar on pages. Even if the form posts to HTTPS, if the page it’s on is just HTTP your site will have this…

Should you move to HTTPS?

Yes! Yes yes yes! Do it! Do it now! ;)

Why should you move to HTTPS?

100’s of other sites have covered this, but what are our top 5 reasons?

1. For the privacy of your site’s visitors.
   HTTPS encrypts the requests and responses between your site and it’s visitors, this protects them from a range of security issues such as…

Running a throw away local web server

Sometimes when you need to view a html file rendered in the browser you can get away with using the file protocol like so: file:///path/to/file.html

But often you’ll want more, such as handling paths to sub resources inside the file as if…

How do you plan to get your sites from HTTP to HTTPS?

Just searching for “move from HTTP to HTTPS” or similar will return plenty results, and you can throw in the platform you’re using like Wordpress etc. to get more relevant information.