Why should I move a website from HTTP to HTTPS? I also had the same question. There was a good discussion going on Shoutmeloud forum, whether a blog should move to https or not. Is there any advantage moving your blog to https?
Excerpts from the discussion,
HTTPS provides many KEY features:-
- Speed is a ranking factor and having HTTP/2 is possible after switching to HTTPS. It is much faster than traditional HTTP/1.1. Ref: See live here http://www.httpvshttps.com/
- Website gets Secure Badge instead of the non-secure warning.
- Data security due to encryption.
Troy Hunt also wrote a good article Don’t Take Security Advice from SEO Experts or Psychics pulling the leg of Neil Patel. In this article, he clearly explained the advantage of https and why you should move your site to https.
Just blogged: Don't Take Security Advice from SEO Experts or Psychics https://t.co/4ifkPAg6Wx
— Troy Hunt (@troyhunt) August 10, 2017
So it is clear that HTTPS provides a secure connection between the user and web server. It actually encrypts data movement, so no one can intercept it. Everyone cares about security considering virus attacks happened in recent time. Many of the users may not visit your site if they see non-secure on your site. This is how internet browser like Google Chrome, Mozilla shows not a secure warning.
Your Connection to this site is not secure
HTTPS as ranking signal
Google considers https as a light ranking signal as per this Google Official Blog. Your Blog may get a small boost in your ranking, but don’t expect it to reach on the first page without good content. At least it can beat your nearest competitor and move someplace ahead in Google SERP.
I am convinced, so moving my one of Blog to HTTPS. What about you?
Next question I had… How? How much will it cost?
You need SSL Certificate and those are not free. I am on a Hostgator shared server. So to get SSL I have to buy static IP and then SSL. Mine is simple Blog, I don’t want to invest an amount in this. But also I do not want to lose my reader because Google Chrome showing my site as non-secure.
So what are my options? Is there any free SSL which I can use on the shared server?
- Cloudflare Flexible SSL
- Difference between HTTP and HTTPS?
- Step 1: Take Backup of your site
- Step 2: Connect your site to Cloudflare
- Step 3: Login to Cloudflare Dashboard and Enable Flexible SSL
- Step 4: Install CloudFlare Flexible SSL Plugin
- Step 5: Add Always Use HTTPS Cloudflare Page Rules
- Step 6: Update old URL to HTTPS
- Step 7: Add New HTTPS property in Google Seach Console
Cloudflare Flexible SSL
Cloudflare provides Flexible SSL which can help to move my site to https and it’s free. But there is a small catch here. It is not 100% secure. If you are not aware let me tell you how Cloudflare works.
When a user enters your web address it hits Cloudflare server first and then Cloudflare connects to your actual web hosting server. In Flexible SSL, the connection between a user and Cloudflare Server is secure while connection from Cloudflare to your web host is non-https. Ideally, it should not matter for someone who is running a blog, but if you are having e-commerce site involving sensitive information exchange you should opt for proper SSL certificate.
Below is list of SSL certificate provides
- Comodo SSL
- Go Daddy
- Blue Host
Check with your hosting providers, they also would probably have SSL service.
Difference between HTTP and HTTPS?
- HTTP – It is a protocol by which your web browser interact and sends data from the server
- HTTPS – It actually the same protocol only here information is encrypted so that no one can intercept it
Read this article instantssl to know about https and https in details. Now I think you are ready to move your site to https.
Step 1: Take Backup of your site
Backing up your site is most important activity. I hope you are already taking backup of your site. If not, just go ahead and take a full backup. You need it to restore your site if anything goes wrong. Updraftplus Plugin and Google Drive is best available option to take back up of blog.
Not sure how to backup your site? Check this article.
Step 2: Connect your site to Cloudflare
Cloudflare provides Content Distribution Network(CDN), Web Optimization service, DDoS, WAF and SSL service. You should connect your site to Cloudflare in advance so that it will be served from Cloudflare network.
Step 3: Login to Cloudflare Dashboard and Enable Flexible SSL
Now login to Cloudflare and open dashboard. Click on Crypto Menu Bar and select Flexible SSL as shown in below image.
It may take up to 24 hours after the site becomes active on Cloudflare for new certificates to issue, but it happens quick.
Step 4: Install CloudFlare Flexible SSL Plugin
You need to install CloudFlare Flexible SSL Plugin. This plugin is required to prevent infinite redirect loops when loading WordPress sites under CloudFlare’s Flexible SSL system.
Step 5: Add Always Use HTTPS Cloudflare Page Rules
Go to Cloudflare dashboard and click on Pagerule menu. You need to add page rule as shown below. This will alwas convert your normal http url to https so that you will not loose any trffic.
Now your HTTP to HTTPS migration is complete. Just open your site in any browser to see if it is having https in URL. If Your connection to this site is not fully secure, then you need to change all URL to https. This happens because your site is old and some of the images, CSS are served over HTTP protocol. You can change this by updating all this url. Manually it is not possible so you can use Better Search and Replace WordPress Plugin.
Step 6: Update old URL to HTTPS
Download WordPress Better Search Replace plugin and install it. This plugin helps you to Search and Replace some text in your website database. This is a really good plugin which allows you to do a dry run without changing anything which is advised before doing it.
Note: Please take a backup before running this.
Enter the text you want to search for and replace with. Check above image. We are going to replace HTTP version URL with HTTPS version URL. Click on Run as dry run before actually doing the replace. This gives you an idea how many tables are going to get updated. Check below image.
Now uncheck Run as dry run and click Run Search/Replace buttons to replace all occurrences. If your website is big, you can select one table at a time and do a replacement if you face any issue with this plugin.
Step 7: Add New HTTPS property in Google Seach Console
Google treats HTTP and HTTPS as the different sites. So you need to add new https property to Google Search Console. No need to delete the old one. Submit new XML sitemap as well. Google will take some time to index your new property.
Tha’s it. You are now on secure connection and I hope this will also help you to boost your ranking little bit on Google Search Console.