An Overview Of SSL Changes – What It Means For Your Website
In today’s ever-changing digital landscape, it’s necessary that companies Google’s best practices to make sure that they stay competitive in their respective online markets. With Google being the most commanding and influential company on the internet, it’s necessary for them to keep abreast of all the threats and opportunities that the internet offers. Accordingly, Google releases a multitude of updates each year: new features, bug fixes, and the majority pertaining to the very secretive Google search ranking algorithm.
What’s important though, is that all online companies that use Google-related services (essentially every online company), are aware of extensive changes that may bear upon their SEO, performance, and ultimately their bottom-line. The internet is in a perpetual state of change, so online firms need to be versatile and conform with new Google updates as quickly as possible to make sure that they aren’t negatively impacted by these new releases.
The biggest Google update that has recently affected online companies pertains to Google Chrome v62, which was released in October this year. The Google Chrome web browser is used by nearly 50% of all online users, so it’s really important that online providers incorporate the specific changes as quickly as possible if they wish to prevent any adverse consequences.
What has changed in Google Chrome v62?
In the Google Chrome v62 update, Google has reformed the way in which it marks non-secured (HTTP) pages. If a non-secured (HTTP) page keeps passwords and bank card information (which is saved in a plain text file), they are vulnerable to phishing sites that can essentially steal this information from consumers that wrongly believe they are giving their personal information to a genuine business. The Google Chrome browser will start marking any text input field and web address bar as ‘NOT SECURE’ for HTTP pages.
This change will surely have an effect on millions of websites across the globe. Before the change, many non-secured websites weren’t affected by phishing attacks simply because they didn’t have a public-facing member login, and utilised PayPal or other offsite payment processors to accept online payments. Now, however, all websites will need to start securing their web pages given that users will become worried of falling victim to harmful attacks if they input their personal information into fields marked boldly as ‘NOT SECURE’.
How to make web pages secure?
For online providers that wish to secure their previously non-secured (HTTP) web pages, they will need to encrypt the information being exchanged between their clients and their web server by incorporating an SSL certificate. Google are distinctly pushing for a more secure internet than ever before, and they’ve chosen SSL encryption as a vehicle to do this. For website owners who wish to enable HTTPS on their web servers, here is a helpful guide: https://developers.google.com/web/fundamentals/security/encrypt-in-transit/enable-https?hl=en. The following link is an additional guide on ways to avoid the ‘NOT SECURE’ warning in Google Chrome which is targeted at website developers: https://developers.google.com/web/updates/2016/10/avoid-not-secure-warn.
What this means for online businesses?
The recent Google update implies that HTTPS and SSL encryption will become the norm across all web pages on the web. One way or another, each online enterprise will have to secure their web pages using SSL encryption whether they like it or not, or users will simply go with a competitor that does.
What this also signifies is that not all websites using SSL encryption should be trusted, and there will be a considerable increase in phishing sites using HTTPS also. Phishing sites can simply use fictitious SSL certificates to circumvent the ‘NOT SECURE’ warning by Google Chrome and make their websites appear valid. This will make the differentiation between phishing sites and real websites more difficult than ever. Online businesses that use an Extended Validation Certificate (EV SSL) will be the most trusted websites on the web since it will be exceptionally difficult for phishing sites to imitate the authenticity that EV SSL provides.
Making all websites employ SSL certificates to validate their authenticity will only increase the number of phishing sites that do the same. At the end of the day, however, SSL encryption will gradually become compulsory, so if you need any support in securing your website with SSL encryption, consult the digital specialists at Internet Marketing Experts Dubbo by calling 1300 595 013, or visit their website for more information: http://www.internetmarketingexpertsdubbo.com.au