SSL Certificate valid for SEO https
-
Hi everybody!
I have talked with my hosting provider and he offers me two kind of SSL. I've read that the best option for SEO is to convert the hole site to https response (not only the payment pages), but my developer team is telling me that this kind of security to the whole site will be negative for all the websites contained under this IP ¡!
So I wonder if somebody who has the https implemented correctly and working properly for SEO could recommend me:
-
which kind of certificate is the correct one and what specific things sould I consider with my hosting provider
-
if it's true that could be a disaster if I implement the https to the whole website beacause I'm blocking the robots and it's dangerous for my domains in this server
Please, any help would be really appreciated. Thanks in advance!
-
-
As long as you properly redirect all pages to the https version, you should be fine. Google released an update a while back stating that secure sites could perform better in search results as it offered users additional security and trust. If you are going through the trouble of updating your site to an SSL, I would set the entire site to fall under the https, not just the payment pages. Google will like it, users will like it. The only drawback I can see is if your account is set up to use shared IP's, in which case you may have to make some modifications if required by your development team.
Here is the quote from Google on this subject:
"Security is a top priority for Google. We invest a lot in making sure that our services use industry-leading security, like strong HTTPS encryption by default. That means that people using Search, Gmail and Google Drive, for example, automatically have a secure connection to Google.
Beyond our own stuff, we’re also working to make the Internet safer more broadly. A big part of that is making sure that websites people access from Google are secure. For instance, we have created resources to help webmasters prevent and fix security breaches on their sites.
We want to go even further. At Google I/O a few months ago, we called for “HTTPS everywhere” on the web.
We’ve also seen more and more webmasters adopting HTTPS (also known as HTTP over TLS, or Transport Layer Security), on their website, which is encouraging.
For these reasons, over the past few months we’ve been running tests taking into account whether sites use secure, encrypted connections as a signal in our search ranking algorithms. We've seen positive results, so we're starting to use HTTPS as a ranking signal. For now it's only a very lightweight signal — affecting fewer than 1% of global queries, and carrying less weight than other signals such as high-quality content — while we give webmasters time to switch to HTTPS. But over time, we may decide to strengthen it, because we’d like to encourage all website owners to switch from HTTP to HTTPS to keep everyone safe on the web."
It's worth mentioning that if the SEO on the site stinks, an SSL will not rescue it from the bowels of page 10 ranking status.
Hope this helps!
-
Hello Esther,
Before going ahead with a move to HTTPS for what could be little gain, have you thought if there are other things that could be done first that will benefit you more e.g responsive UX etc.
A move to HTTPS can be a big job and needs to undertaken very carefully to minimise problems, check, check and check again all redirects, canonical links, external, internal links etc to ensure that you give yourself the best chance to succeed in a move.
For more on moving to HTTPS take a look at a good article from Branded3 about some of the additional pros and cons.
-
-
There is no such thing as an SEO SSL certificate. You just need one that is 2048 bit encryption ideally
-
Having an entire site as https is not a bad thing... in fact it's recommended by Google.
-
Its up to you to implement it sitewide or only on pages with secure information being exchanged (checkout, login)
There is a small boost to SEO from https urls but there also might be a small dip in rankings from switching over (and using 301 redirects). In addition, if you mess up the URL transfer, you could hurt yourself so be sure to do a proper site move.
-
-
It used to be true that you had to have one IP per SSL certificate, but if you have a modern web server you can use something called Server Name Indication instead.
I'm not sure what you mean by "offered 2 types of certificate". There's a couple of ways to take that.
- Your provider is offering you a SHA1 or a SHA2 (SHA256) certificate. If you get this option select SHA2, as SHA1 is now deprecated due to security issues and will be unsupported in modern browsing soon.
- Your provider offered you domain validation vs extended validation. The latter is only for registered corporations and gives you the "green bar". It does not afford you any more security from an encryption standpoint (both use the same underlying systems), it just looks better in the browser.
Putting your whole site under SSL is not a bad move from an SEO standpoint. Google publicly said that SSL is a ranking factor (nobody knows how much of one it is, but the boost is minor if there is one) and robots have supported SSL for many years. What I would do, if I were you, is make sure you have a proper redirect to force users into SSL. Don't run a mixed encrypted/unencrypted site if possible.
Last but certainly not least, after you get your SSL set up you need to audit your SSL. This is a critical step many website owners miss. Just this weekend I found a site with incredibly outdated software and, as such, it supported every SSL flaw in the book. A site with SSL exploits still enabled might as well not run any SSL at all.
Got a burning SEO question?
Subscribe to Moz Pro to gain full access to Q&A, answer questions, and ask your own.
Browse Questions
Explore more categories
-
Moz Tools
Chat with the community about the Moz tools.
-
SEO Tactics
Discuss the SEO process with fellow marketers
-
Community
Discuss industry events, jobs, and news!
-
Digital Marketing
Chat about tactics outside of SEO
-
Research & Trends
Dive into research and trends in the search industry.
-
Support
Connect on product support and feature requests.
Related Questions
-
Meta refresh bad for SEO
Hi there, Some external developers have created a wishlist for a website that allows visitors to add products to a wishlist and then send an enquiry. Very similar set-up to a shopping basket really (without the payment option). However, this wishlist lives in a separate iframe and refreshes every 30 seconds to reflect any items visitors add to their wishlist. This refreshing is done with a meta refresh. I'm aware of the obvious usability issue that the visitor's product only appears after 30 seconds in their wishlist. However, are there also any SEO issues due to the refreshing of the iframe every 30 seconds? Please let me know, whether small or large issues.
Intermediate & Advanced SEO | | Robbern0 -
How have your SEO Audits evolved over time?
Hi guys, SEO Audits used to be so focused on the basics like title tags, meta descriptions etc. but now more than ever, SEO is a discipline which encompasses everything from content marketing to UX design. Would be great to hear from everyone how their audit templates have evolved over time to keep up with the latest updates in SEO and algorithm changes! Which new sections have you added and which have you removed?! Cheers, Daniel
Intermediate & Advanced SEO | | Daniel_Morgan0 -
Page Speed Factors For SEO
Hey Guys, I have developed a page and optimised it. I have got a dilemma, I have 2 variants of the optimised page I could use. The page is responsive and uses bootstrap from an external CDN. The 2 variants: External CDN - This is adding an an extra request and is delivering the entire framework (not ideal for mobile) I've looked in the node/grunt.js route (+unCSS) to remove redundant CSS, which led me to my next variant. Inline CSS. After doing some grunt.js work I shaved out the redundant code from the framework then added it inline. I will also point out that all assets are optimised, all CSS/JS/HTML is minifed. In terms for score the 1st variant is less than the second, but I believe that most users of the internet already have bootstrap cached due to it being so common. The ultimate question comes down to ranking, I'm not entirely sure where I draw the line between development and SEO (I will also ask in Stack Overflow). Which one would rank better? all other factors being equal.
Intermediate & Advanced SEO | | AkashMakwana0 -
Is this link SEO-Friendly?
Hi Mozzers, Was wondering if someone could tell me if this link is SEO-friendly? class = "sl">name="sc" type="checkbox" value="1449"><a <span="">href</a> <a <span="">="</a>http://www.example.com/" onclick = "Javascript: return dosc(2);">src="imsd/coff.gif" id="cbsc2"/>Keyword It has some Javascript that makes the link work like a filter. Cheers, Carlos
Intermediate & Advanced SEO | | Carlos-R0 -
Glossary SEO Tactics
A B2B client has a glossary of about 300 terms on its Website. It was done to enhance SEO value. The pages are rarely viewed and the text is often short. What are the best (and wackiest!) ideas to leverage this content for SEO. Here are some: Add videos, images Cross link to content pages Open up comments and get students in this sector to review terms and add their own What else do you suggest?
Intermediate & Advanced SEO | | HarrAuto0 -
Subdomains and SEO - Should we redirect to subfolder?
A new client has mainsite.com and a large numer of city specific sub domains i.e. albany.mainsite.com. I think that these subdomains would actually work better as subfolders i.e mainsite.com/albany rather than albany.mainsite.com. The majority of links on the subdomains link to the main site anyway i.e. mainsite.com/contactus rather than albany.mainsite.com/contactus. Having mostly main domain links on a subdomain doesnt seem like clever link architecture to me and maybe even spammy. Im not overly familiar with redirecting subdomains to subfolders. If we go the route of 301'ing subdomains to subfolders any advice/warnings?
Intermediate & Advanced SEO | | AndyMacLean0 -
SEO for Log in Sites
Hello, I just lunched a website where you have to sign up and to log in in order to use it. So I have the home, also a blog but then the rest of the pages are let's say it "hidden".How would you do the seo for it? I have been cheking facebook, foursquare and some others and they use different approaches. Facebook uses the same description in every single page for example. My site is similar to foursquare users have profile, stats, history, ranking. Well, what is your advice?? Thanks a lot
Intermediate & Advanced SEO | | antorome0 -
Hiring an SEO company
I usually do SEO myself but now its time to move on to getting on with running the business. I have found a fantastic PPC company who ONLY focus on PPC and am looking for same but for SEO. Must be based in UK and have a great portfolio of mid/large tier companies with some real life stats to back them up. Pricing must be clear and transaparent. Results must be measurable. How would you find such a company? Ironically searching on Google doesn't seem to produce the right results 😞 Alastair
Intermediate & Advanced SEO | | alastairc0