HTTPS Implementation

What is SSL?

SSL (Secure Sockets Layer) is a protocol used to establish a secure and encrypted connection between a web server and a web browser. It ensures that any data transmitted between the server and the browser remains private and secure.

Common HTTPS Error

Subdomain SSL issue

Site error and troubleshooting-subdomain don't support HSTS

How to Fix it?

  • Set the server up with HSTS 

Basic Requirements:

  1. Serve a valid certificate.
  2. Redirect from HTTP to HTTPS on the same host, if you are listening on port 80.
  3. Serve all subdomains over HTTPS.
    • In particular, you must support HTTPS for the www subdomain if a DNS record for that subdomain exists.
  4. Serve an HSTS header on the base domain for HTTPS requests:
    • The max-age must be at least 31536000 seconds (1 year).
    • The includeSubDomains directive must be specified.
    • The preload directive must be specified.
    • If you are serving an additional redirect from your HTTPS site, that redirect must still have the HSTS header (rather than the page it redirects to).

5. Edit .htaccess File with the request.

  • Using SSH or the cPanel File Manager, navigate to the ~/public_html directory.
  • Use your preferred text editor to open the .htaccess file.
    If the .htaccess file does not already exist, create it.
  • Copy the following line, and then paste it into the .htaccess file
  • Save your changes to the .htaccess file. HSTS is now enabled for your site.
Otc. 19th, 2023 updates

While you can add the HSTS header to your .htaccess file in various locations, it’s generally recommended to place it at the top of the file. Placing it at the top ensures that the HSTS header is processed before any other directives

Header always set Strict-Transport-Security “max-age=31536000; includeSubDomains; preload”

Check HSTS Preload Status and Eligibility

Check the HSTS status and eligibility of our client’s website example on https://hstspreload.org/ before and after editing the .htaccess file. This will show you the current status of HSTS and whether the website is eligible for preload.

Before

Check HSTS preload status and eligibility-before

After

Check HSTS preload status and eligibility-after

The improved SEO results you will read from your SEO audit report. 

HTTPS Implementation, Technical SEO support from Easymarketing

Technical SEO Support from Easy Marketing

Using HTTPS (secure HTTP) can help improve the security of your site and boost search engine rankings. This is what you will read from your SEO reports with the technical SEO support from Easy Marketing Team. 

Powered by BetterDocs

Leave a Reply

Your email address will not be published. Required fields are marked *