WordPress and SSL
0 likes798 views
The document discusses SSL (Secure Sockets Layer) and its importance for secure online communication, including when to use it, costs associated with SSL certificates, and the implementation in WordPress. It outlines the differences between HTTP and HTTPS, provides guidance on enabling SSL, and highlights tools for managing SSL. Additionally, the document includes a basic SEO-friendly SSL migration checklist and further reading resources.
![What is SSL? (via Wikipedia)
• HTTPS (also called HTTP over TLS,[1][2] HTTP
over SSL,[3] and HTTP Secure[4][5]) is
a protocol for secure communication over
a computer network which is widely used on
the Internet. HTTPS consists of communication
over Hypertext Transfer Protocol (HTTP) within a
connection encrypted by Transport Layer
Security, or its predecessor, Secure Sockets Layer.
The main motivation for HTTPS
is authentication of the visited website and
protection of the privacy and integrity of the
exchanged data.](https://image.slidesharecdn.com/wordpress-ssl-170308091523/85/WordPress-and-SSL-9-320.jpg)
WordPress and SSL
- 5. Overview • What is SSL? • SSL growth • When should you use SSL? • Cost of an SSL certificate • Enabling SSL in WordPress • Common pitfalls • Benefits • SSL tools • Further reading
- 9. What is SSL? (via Wikipedia) • HTTPS (also called HTTP over TLS,[1][2] HTTP over SSL,[3] and HTTP Secure[4][5]) is a protocol for secure communication over a computer network which is widely used on the Internet. HTTPS consists of communication over Hypertext Transfer Protocol (HTTP) within a connection encrypted by Transport Layer Security, or its predecessor, Secure Sockets Layer. The main motivation for HTTPS is authentication of the visited website and protection of the privacy and integrity of the exchanged data.
- 11. When Should You Use SSL? • Ecommerce sites • Whenever dealing with sensitive data • When user trust matters
- 14. Forcing SSL for Logins // Force SSL all WordPress define( 'FORCE_SSL_LOGIN', true ); define( 'FORCE_SSL_ADMIN', true );
- 16. Mixed Content
- 17. WooCommerce
- 20. Cost of an SSL Certificate • $10 to $10,000 • Average cost $50 - $150 for single domain • Wildcard (for multiple subdomains) can cost a little more • Let’s Encrypt is free!
- 21. WP Force SSL
- 28. OpenSSL Testing • You can also use OpenSSL for testing, example: > openssl s_client -connect example.com.au:443 -servername example.com.au -status
- 32. A Basic SEO-friendly SSL Migration Checklist • Add https variants in Google Search Console • Check and fix any hard coded resources that would cause mixed content warnings, ideally use relative rather than absolute URLs • Update internal links to https variant • Ensure 301 redirects are in place for all http URLs • Update sitemap links (but do not replace old sitemap until 301s are indexed) and robots.txt (if used) • Test all URLs are accessible, fetch and render with Googlebot • Configure the web server to send SSL headers (optional)
- 34. Further Reading • https://wptavern.com/more-than-50-of-web- traffic-is-now-encrypted • http://www.wpbeginner.com/wp- tutorials/how-to-add-ssl-and-https-in- wordpress/ • https://moz.com/blog/seo-tips-https-ssl • https://chrislanauze.com/design- development/wordpress-meetup/how-to- configure-https-on-wordpress-683/