Another http vs https Question?
-
Is it better to keep the Transaction/ Payment pages on a commercial website as the only secure ones (https) and remainder of website as http?
Or is it better to have all the commercial website as secure (https)?
-
I really appreciate your help. This information will definitly help me to keep my site all throughut as https the same way I wanted it to be from the beginning.
You are the Best.
S.H
-
No problem - you could place canonical tags on all the http:// pages to the https:// -
have a look at this guide from SeoMoz -
http://www.seomoz.org/learn-seo/canonicalization
I think you should also give this recent Q&A a read as it is very informative in regards to what you are looking at -
http://www.seomoz.org/q/duplicate-content-and-http-and-https
Hope this helps
-
Wow, thank you so much for your response. It attracted my attention to new points. Is there a way to keep the site entirely as https and avoid the duplicate content issue?
I am fairly new to SEO.
I am struggling with a solution for this website which is Drupal based as I am finding it not that easy to work with from SEO point.
Again thank you so muh.
S.H
-
Hi,
Thanks for your response. The thing I had the website set as such as Http with Https oertaining to transactions only but had problems in a warning appearing on logging to website indicating that some contents of pages have insecure informtion withan option to logon anyway. This has been turning visitors away.
I however realize that I have a duplicate content issue with website being as https at the moment. I am just trying to reach a solution whereby visitors feel safe purchasing from a new website that offers quite diverse service at better price than the other competitors who are major market players.
Thanks.
S.H
-
From what I understand, login boxes usually wait to be logged in to activate HTTPS. And as for social media accounts, aren't the social media sharing and links sent to the social network? Like Twitter usually goes to API of twitter's site, which is usually HTTPS.
-
Hi,
The thing is that I have the login box on all pages of that website to allow access for purchase of Products that are quite diverse and also toenter to website's social media accounts.
That is what had led me to have it https throughout whole site
Thanks.
S.H
-
From my experience, if you are an eCommerce site, it is usually best to have https with account or checkout pages.
If you are a banking or payment processing site, it is best to have https throughout the site to offer confidence to users.
So...
eCommerce = Only in checkout/payment pages or account info.
Sensitive sites, like banking or financials = throughout the whole site.
-
This is a good question, I would consider going down the route of making your transactional/payment pages https and then anything else http - anywhere your customers have to enter their sensitive data should be https. The one thing to remember with https is that it potentially causes duplicate content from a search engine point of view:
http://www.seomoz.org/q/duplicate-content-and-http-and-https
Have a look at this interesting article in relation to https and why everyone isn't using it:
http://arstechnica.com/business/2011/03/https-is-more-secure-so-why-isnt-the-web-using-it/
Remember more importance has been placed on page load times since Panda so people are looking to shave every ounce of time they can in relation to load times, this also improves user experience.
I hope this has helps give you some more insight into HTTPs and whether it would be best for your site to be all this protocol or just part of it.
-
As long as the pages that users enter any type of private / secure information is SSL (https), than you're fine. Alternatively if you want to have your entire site https, that’s fine also.
Got a burning SEO question?
Subscribe to Moz Pro to gain full access to Q&A, answer questions, and ask your own.
Browse Questions
Explore more categories
-
Moz Tools
Chat with the community about the Moz tools.
-
SEO Tactics
Discuss the SEO process with fellow marketers
-
Community
Discuss industry events, jobs, and news!
-
Digital Marketing
Chat about tactics outside of SEO
-
Research & Trends
Dive into research and trends in the search industry.
-
Support
Connect on product support and feature requests.
Related Questions
-
Https problem on google result.
Hello everyone. My problem is SSL certificate... Send all links to google, after google shows https link no problem. But a few minutes ago my home page link not have an SSL..
Technical SEO | | dalapayal
Please check this page : https://www.bodrumtransfermarket.com Where do I make a mistake? Thanks for all...0 -
Bing rankings question
Hi, We just wrapped up a website redesign about a month ago. The content stayed primarily the same. Once we launched the new site all of our rankings in Google stayed the same but we lost rank for all competitive keywords on Bing. I looked in Bing Webmaster tools and it doesn't show any penalties but it does show that we have too many H1 tags. I don't think the H1 tag thing is the issue but maybe. Do you know what could be causing this?
Technical SEO | | BT20090 -
What is the best way to deal with https?
Currently, the site I am working on is using HTTPS throughout the website. The non-HTTPS pages are redirected through a 301 redirect to the HTTPS- this happens for all pages. Is this the best strategy going forward? if not, what changes would you suggest?
Technical SEO | | adarsh880 -
Https Duplicate Content
My previous host was using shared SSL, and my site was also working with https which I didn’t notice previously. Now I am moved to a new server, where I don’t have any SSL and my websites are not working with https version. Problem is that I have found Google have indexed one of my blog http://www.codefear.com with https version too. My blog traffic is continuously dropping I think due to these duplicate content. Now there are two results one with http version and another with https version. I searched over the internet and found 3 possible solutions. 1 No-Index https version
Technical SEO | | RaviAhuja
2 Use rel=canonical
3 Redirect https versions with 301 redirection Now I don’t know which solution is best for me as now https version is not working. One more thing I don’t know how to implement any of the solution. My blog is running on WordPress. Please help me to overcome from this problem, and after solving this duplicate issue, do I need Reconsideration request to Google. Thank you0 -
Specific Domain Migration Question
My company will be taking over an ecommerce site that is built to get local city/state traffic where the competition is slim to none for the given keyword. This site gets 2500+ visits per day, and we're looking to maintain and eventually grow that traffic. We would like to move that site onto our ecommerce platform which will force URL change and of every 'keyword' city/state page on the site. We're undecided whether to keep it on an unfamiliar platform that already gets traffic or to move it and possibly face the 404's or weeks of redirecting a single keyword-city/state page to another. Any advice or insight would be great!
Technical SEO | | BMac540 -
Mod rewrite question
Sorry in advance if this isn't the best place to ask this question. Google Webmaster Tools has recently identified a ton of "Not Found" pages, which are actual pages with some digits appended at the end. For example, suppose an actual page on my blog is: (A) http://www.example.com/blog/2012/09/my-post-title/ This page works just fine. However, GWT has identified the following page as a "not found" page: (B) http://www.example.com/blog/2012/09/my-post-title/9157586677/1846732913010 This appears to be happening to hundreds of posts on my site. In each case, the "9157586677" portion of the URL is identical, but the remaining 13 digits change from page to page. I haven't been able to determine exactly what is causing this to happen - it's probably a social plug-in for Wordpress, or perhaps Disqus, but I'm not sure which one. I'll go through a process of elimination to narrow it down over the coming week. As a quick fix, I'd like to create a ModRewrite rule so that requests for (B) get 301 redirected to (A). Since there are hundreds of posts, I need to do this in a way that works regardless of what's in the "/2012/09/my-post-title/" part of the URL. Unfortunately, mod-rewrite is outside of my area of expertise. Can somebody please suggest how I can handle this? Thanks in advance. PS - As for tracking down the cause, I've looked at the source of the pages in the "Linked From" area of GWT and the Not Found link is nowhere to be found. That is why I assume the bad link is being generated by some javascript that is a part of one of my plug-ins. Update: It seems like Disqus is the source of these phantom links. There's considerable discussion here. I'll continue searching for a long-term solution. Meanwhile, I'd still appreciate help with the mod-rewrite question above. Thanks again.
Technical SEO | | ahirai0 -
Wordpress question
I was curious when i run an OSE report on certain websites and their name.wordpress.com shows up with a PA of whatever and a DA of 100. But when I created my wordpress site and post on it, it only has a PA and DA of 1. is this because SEOmoz has not indexed it yet? It is a month old. http://shiftinsurance.wordpress.com/ Can anyone help pls?
Technical SEO | | greasy0 -
Blog question
If i set up a blog like this - http://www.abccompany.com/blog ? ( in a folder ), will each link to http://www.abccompany.com/blog carry more value to the main site than if the blog were set up like this- http://www.blog.abccompany.com
Technical SEO | | seoug_20050