HTTP or HTTPS – what you need to know

It is no secret that search engines favour a well-crafted and secure website and last year Google stated that it would like to see all of those on the web have an HTTPS - and not just HTTP - address.

So, what do HTTP and HTTPS mean and why does it matter today? Essentially it all boils down to web security.

HTTP stands for Hypertext Transfer Protocol and when this is present at the start of a URL it denotes an unsecure protocol that is responsible for the transport of data across networks, e.g. from server to client. The risks of an insecure connection are well documented and widely known.

In the HTTPS acronym, it is the ‘S’ that is the most important part. The ‘S’ stands for ‘secure’ and indicates that communications across a network are encrypted so no one can access the data during transfer, and that the website data itself is safe from attack.

Secure protocols needed for protection

Google remains committed to ensuring that the web is a safe place to do business and states the need for secure protocols that support this view. These are:

  • Authentication – the importance of site verification. Most users are aware that they should check the site is showing the Green Padlock symbol before entering personal data. This is your sign that secure.
  • Data Integrity – is the data on the site free from the risk of tampering. No user would wish their personal information to end up in the hands of a hacker.
  • Encryption – security of data transfer refers to encryption, vital for eCommerce sites but also for data submitted via web forms.

Improving website security

Now in 2017 Google have announced that they intend to take further steps to encourage the improvement of website security. It will warn visitors to sites accessed via their search engine that pages they are about to enter information into are not secure. 'Contact Us' pages are likely to be included in this action as they collect personal/sensitive data.

Google has also recently announced that its ranking algorithm will prioritise HTTPS site over HTTP, which only serves to reinforce their commitment to supporting a safer and more secure web for all users. Website owners can be reassured that the purchase of an SSL (Secure Socket Layer) certificate will encrypt communications via an encryption key that is placed on the server. This will benefit them in terms of search rankings and with regards to user security and confidence. Once the certificate is installed, your site will require re-indexing to take account of the change to the URL (which could take a period of time), however setting up a redirect from the original HTTP address to the new HTTPS could help to avoid a significant drop in website footfall.

Do your competitors have HTTP or HTTPS?

One final thought - try typing your business USP/keyword into Google. How many of your competitors are already benefiting from an HTTPS address? Remember that this could help boost their position in the rankings (an important benefit in addition to security considerations of course!) 

Business community ambassadors