HTTP to HTTPS

[xoggoth]

Need to do this. Very good link here:

https://smallbiztrends.com/2015/04/c...-to-https.html

So I:

1) Make sure I have relative links or change absolute links (some needed in Paypal etc stuff) to https.
2) Set rewrite rules in htaccess
3) Update sitemap
4) Pay a whole £23.99 to my host providers for SSL certificate. They say it's all installed and working in minutes.


All looks pretty simple. Just wondering if brill CUKers know of any possible problems.

[chineseJohn]

depending how your site is hosted - how about getting a free HTTPS cert via Letsencrypt. I HTTPS'ed 5 websites with Letsencrypt and Win-ACME (for IIS) in about 30 minutes.

[Spoiler]

+1 for LetsEncrypt. Use a hosting provider that has this functionality.

[Spoiler]

And ... if you’re interested in SEO add the https site to google Search Console (webmaster tools).

I think you can also set the preferred domain, but that maybe more to do with www v non-www than http v https

[xoggoth]

Cheers. The hosters do letsencrypt, will look at that.

[NickFitz]

Set up a reminder in your calendar to check the certificates have been renewed. IIRC, Let's Encrypt ones need to be renewed every three months, and although your hosting people should look after it, it's worth checking yourself at least the first time or two, just in case.

[Spoiler]

Set up a reminder in your calendar to check the certificates have been renewed. IIRC, Let's Encrypt ones need to be renewed every three months, and although your hosting people should look after it, it's worth checking yourself at least the first time or two, just in case.

Admitidley I’ve had a couple of instances where the let’s encrypt cert had not renewed for an addon site and I’ve had to contact the hosting support to sort out.

I since started using Uptime Robot to check for expiring/expired certs and alert me - may only be an option on their paid for service though.

[xoggoth]

Much ta. Still not got round to it, trying to make sense of my sister's awful bookkeeping ahead of looming CT deadline.

[xoggoth]

HTTPS all done. One not obvious thing I never saw mentioned is to check all pages for external content, images etc, from insecure external sources.

Found my index page still had a warning, turned out to be due to the Sitelock thingy.