Google and Mozilla, in the latest versions of their Chrome and Firefox browsers, began to mark sites in the address bar that do not use encryption (i.e., work over the HTTP protocol) as insecure.
HTTPS is an extension of the HTTP protocol to support encryption for improved security. Data in HTTPS is transmitted over the cryptographic protocols SSL or TLS. Encryption of connections is considered a necessary measure to reduce the risk of modification or theft of user data by intruders. Thanks to HTTPS, data is protected from third parties, and the user can be sure that he has entered the real site, and not a copy.
Passwords and bank card data transmitted over the Internet are the most interesting “prey” for intruders. Therefore, now when entering sensitive data into forms on sites that work via HTTP, users will receive a message that their actions are not safe.
Also, as part of the campaign to protect the Internet, Google already notifies mobile users (and will soon notify users using PCs) when they navigate to insecure sites (without encryption) in their search results. All these actions will soon lead to the fact that either sites will start using the HTTPS protocol by installing SSL/TLS certificates, or they will begin to lose traffic and audience.
In order not to lose visitors and sales, we recommend that you plan to move your site to HTTPS now. Check with your hosting company’s website to see what options they have for SSL/TLS certificates. For example, our partner SprintHost has an option to install a free lifetime TLS certificate from the Let’s Encrypt project.
The Let’s Encrypt project was created to ensure that the majority of Internet sites can migrate to encrypted HTTPS connections. Unlike commercial certificate authorities, this project does not require payment, reconfiguration of web servers, the use of email, or the processing of expired certificates, which makes the process of installing and configuring TLS encryption much simpler. The sponsors of the project include Google and Mozilla, so you can be sure that the certificates will not lose trust, as recently happened with certificates from WoSign and StartCom.
If you need help choosing an SSL/TLS certificate and transferring your project to HTTPS, please contact us, we will help!
