As a way to protect your site and your users, Google’s recent decision to add SSL on website is a huge deal that can cause other big networks to follow suit.
What is HTTPS? HTTPS (Hypertext Transfer Protocol Secure) is used for internet communication protocol that protects the confidentiality of data between the site and the user’s computer. When using the internet, many users expect to have a secure and private experience online, however, this isn’t always the case. In order to have a more secure experience online, Google is encouraging users to adopt HTTPS to better protect your users connection to websites.
There are three key layers of protection:
- Data Integrity – This is when data can’t be modified or corrupted during a transfer, whether it’s intentionally or not, without being detected.
- Encryption – You’ve probably heard of encryption before. Sites and apps such as What’sApp are known for its great use of encryption between users. Encryption is the exchanged data to keep it secure from eavesdroppers. While a user is using a website or the WhatsApp app, no one can “listen” to their conversations, track their activities or steal their information.
- Authentication – Authentication proves that users the users is communication with the right intended website. By building users trust, it protects against man–in–the–middle attacks(attacker secretly alters the communication between two parties who believe they are connecting with one another).
In the latest Chrome browser version, Google will begin to warn users on websites not using SSL(https), and present a message in the address bar that will read as ‘not secure’ on the green lock, including the name of the company or organization. Within the info of the lock, it will explain the connection and permissions and the security of it.
Usually, Google would include https on sites that require credit card information or password. Instead, it will be labeling all websites. This means if your site is secure, but will show your users that is not, try looking into adding ssl for the better sense of security to your users.
Categorised in: Security