Google Chrome and SSL
Google have recently been sending emails out to anyone registered on their Webmaster Tools system alerting them to upcoming changes to their Chrome browser.
If you've received one, it will have been titled something like
"Chrome will show security warnings on http://www.plexusmedia.co.uk".
These are genuine emails, if a little bit over-scary.
To understand what's happening here you need to know a little about SSL and HTTPS. If your website just has http:// at the front of its URL, that means any data transmitted between your visitor and your website is done in plain text. So if for instance you have a search box on your site and your visitor types "gateaux" into it, the word "gateaux" is sent across the internet to your website, and in theory could be seen by someone intercepting the traffic between the two devices.
If you have an SSL certificate for your website, then your address will be prefixed with https:// instead of http:// and will have a padlock in the address bar in most browsers. In this case, instead of "gateaux" being transmitted, the traffic is all encrypted, so if someone intercepts the data all they'll see is jumbled gibberish.
None of our clients' websites take credit card details - those which do accept orders pass visitors onto encrypted systems like Paypal and Sagepay for this - so financial data isn't at risk in this case. There are other risks though - your admin password, or if you take orders then perhaps your clients' home phone number and email address are being transmitted over http:// and so could theoretically be intercepted.
In practice the likelyhood of someone intercepting traffic between your visitor and your website is pretty small, but it's not zero. If your visitor uses an unencrypted WiFi network, or someone at their ISP or your web hosting service decides to snoop, then it could happen.
An SSL certificate will probably cost you around £50 per annum, along with a bit of our time as an initial cost in setting it up. It's your decision as to whether you want to do this or not. It's not impossible that some of your clients might be worried by the warnings that Google Chrome (and other browsers) show on your site and decide to go elsewhere. Or people in general may become blind to these warnings and pay them little attention.
This probably isn't a decision you need to take in a hurry though. Even once Google Chrome starts showing these warnings, yours will be one of millions of websites with them.
Nevertheless, SSL is a good thing - if you feel you can afford it you should probably go for it.
- New Tomatin Trading website. 30 October 2018
- Visit by Painted Dog Conservation UK. 16 October 2018
- Coupers Creek. 5 July 2018
- Gallery48, Cromarty - new Wordpress site. 5 July 2018
- Lethe Estate - new site launched. 8 March 2018
- Aberchalder & Glengarry Estates. 6 December 2017
- New Cromarty Pottery Wordpress website launched. 8 November 2017
- Befrienders Highland site launched. 3 October 2017
- Black Isle Local Larder site launched. 3 October 2017
- Google Chrome and SSL. 18 August 2017
The design, layout and functionality of our new site work exceptionally well for us. Colin designed a site that was exactly what we were looking for. It was a pleasure working with designers who are professional, understanding and creative.