Google to use HTTPS as a ranking signal

[universal4]

Well, if the message the user sees is extremely important to you, then purchasing a low cost SSL might be the way to go, but research them well since most of the no cost and low cost ones will not be in the list of authorized authorities.

The ones I mentioned above should be though.

Rick
Universal4

[DanHorvat]

I still think SPF/DKIM would help, but only if the majority of people would be using it. It doesn't work on an individual basis, it's a collective effort.

IceBlueHost SSL prices:
AlphaSSL 14.95 € / year
DomainSSL 69.95 € / year
OrganizationSSL 99.95 € / year
ExtendedSSL 399.95 € / year

You do need an SSL certificate to run https properly, don't you? It needs to be a third party which is a recognized authority.
Rick, when you mentioned there is https on the server, you mean like WHM and cPanel?

[slotplayer]

I would not go with a low cost certificate just to save a little money. Like Rick said I'd use one from the trusted list. Verisign or Godaddy.

[DanHorvat]

Yup GoDaddy spells trust, all of their products are of amazingly high quality so the same can be expected from their entry-level SSL certificate.

Globalsign is stupid, offering four different types of SSL certificates, from entry-level to high-end. GoDaddy took care of that with a single overpriced entry-level product, targeted at clueless fools who use their hosting services.

[universal4]

NO Dan, the server will encrypt the traffic if https is enabled....with-or-without the certificate.

Https works just fine without a cert, or the server can "self-sign" the cert, but the browser error asking if you understand the risks would pop up. By the way, if the cert is purchased from an "un-authorized authority" the popup error is the same.

I don't recall how to do it in Cpanel, but I am sure it is fairly straight forward.

The certificate is a product that allows companies to make money selling certs (they used to all be $500 to $1000 each) purchased from a certificate authority that is supposed to go through some verification process of who you are and that your data matches other sources and that you actually own or are authorized to act on behalf of the domain name the cert is being purchased for.

Ironically, if you have pages that show with and without the www, you need to think about which one you will use. If you purchase a cert with the www.domain.com and you arrive at a domain.com page that is secure, the user will be presented with an error that the certificate does NOT match the name.

I do not know how difficult or expensive it is to get the title as an authorized certificate authority, but once you are your certs would be in a list by browsers which would avoid the popup about the cert not being authorized once the cert list is given to the users through normal updates.

I have been involved in plenty of corporate situations where we wanted to use encryption for certain functions and we have used self-signed certificates without issue whatsoever.

Rick
Universal4

[Christiaan]

Ironically, if you have pages that show with and without the www, you need to think about which one you will use. If you purchase a cert with the www.domain.com and you arrive at a domain.com page that is secure, the user will be presented with an error that the certificate does NOT match the name.

There are certificates that include the topdomain and a subdomain (www). For example the Comodo PositiveSSL has this option.

In DirectAdmin it is easy to install a certificate. I think it will be the same for cPanel or WHM.

[sampendleton]

Isn't just weird, after so many years, google decided https as a ranking factor?
Switching from http to https is most likely to be considered as moving to a new domain (as per Google).
Is it worth it? Will you risk your site?

[liamuk756]

Yup GoDaddy spells trust, all of their products are of amazingly high quality so the same can be expected from their entry-level SSL certificate.

Globalsign is stupid, offering four different types of SSL certificates, from entry-level to high-end. GoDaddy took care of that with a single overpriced entry-level product, targeted at clueless fools who use their hosting services.

True that GoDaddy are cheap as f... for trust esp for domain registrations.

And I agree with someone above...it really depends in what niche is your website in order to have some value having SSL - for affiliate niche... having SSL will matter nothing.
And about transfering to https from http -- wel just do the proper redirects and all will be fine.

[Gabba]

I have not converted into HTTPS then also ranking well . Is it necessary to convert in near future OT whats Google thinks..Really confusing matter for me.. One question is Https used to secure information..and how it works..?

[sweetbet]

I wonder if this is just another spam fighting move. People with multiple low quality / spammy sites are unlikely to purchase a certificate for every site.

[DaftDog]

Isn't just weird, after so many years, google decided https as a ranking factor?
Switching from http to https is most likely to be considered as moving to a new domain (as per Google).
Is it worth it? Will you risk your site?

You would need to redirect all http pages to https. and also change your Google Analytics code generator from http to https.