Google to Flag HTTP as Unsecure from July

For several years, Google has been encouraging businesses, developers and organisations to make their websites more secure. As of July 2018, Google is taking things a step further by flagging all HTTP sites as ‘Not Secure’ on their popular Chrome browser. This is a significant shift, which means that if your site lacks a SSL (Secure Sockets Layer) encryption, you may soon find yourself at a disadvantage in both search rankings and user trust.

HTTP vs HTTPS

In simple terms, if your website’s address begins with ‘HTTP’, it will soon be marked as unsecure. In contrast, HTTPS—where the ‘S’ stands for Secure—signals a site that has SSL encryption, providing greater security for users.

Google began prioritising HTTPS over HTTP in its search rankings several years ago, as part of its commitment to creating a safer web. Their push has been effective, with most websites now using HTTPS. Currently, over half of Chrome downloads use this secure protocol.

Until now, Chrome has only indicated secure connections through a padlock icon in the address bar, while HTTP connections were labelled as neutral. However, beginning in July, HTTP sites will be flagged with a red warning label, clearly indicating their unsecure status. For businesses, this could have a considerable impact on user engagement, potentially affecting sales and conversions, and it is likely already influencing organic search rankings.

The Benefits of HTTPS

Even if your business doesn’t directly handle sensitive data, it is now crucial to switch to HTTPS. Remember, if you collect names or other identifying information through a contact form, the GDPR regulations classify this as handling sensitive data, requiring businesses to keep it secure.

HTTPS offers more than just security against hackers; it includes the latest encryption features to protect your site and users. Without SSL encryption, hackers can intercept unprotected communications, tricking users into sharing personal information. Every day, websites exchange countless bits of data with users. HTTPS helps prevent these communications from being intercepted by unauthorised parties.

Many hackers aggregate seemingly insignificant pieces of information over time, building up data that can later be used in fraudulent activities. This means that even an unprotected site collecting minimal information can, over time, expose visitors to increased risk. Google’s move to flag HTTP as unsecure is a proactive step towards creating a safer internet and other browsers are likely to adopt similar standards in the coming years.

What is an SSL Certificate?

To make the switch to HTTPS, you’ll need to purchase and implement an SSL certificate. There are different levels of security to suit various types of websites, such as single domains, multiple sites or subdomains. Choosing a reputable SSL provider is key—ideally, one that offers excellent customer support and detailed setup guides to make the transition easier. UK-based providers like Fasthosts, for example, offer SSL certificates along with helpful implementation guides.

Installing an SSL certificate doesn’t need to be daunting, nor should it be costly. Many web hosting providers offer SSL certificates for free or as part of their hosting packages, so it’s worth checking with your provider. Given the benefits to user trust and search visibility, having SSL is becoming essential, especially for sites that want to avoid Google’s ‘Not Secure’ flag on Chrome.

Steps to Switch to HTTPS

1. Purchase an SSL Certificate: Start by purchasing an SSL certificate. Check with your hosting provider to see if they offer free SSL certificates through services like Let’s Encrypt.
2. Install the SSL Certificate: Your hosting provider will typically have guides or support to help you install the certificate. The process is straightforward for most sites and many providers will even install it for you.
3. Update Internal Links: Change any internal links pointing to HTTP to HTTPS. This includes links in your navigation, images, CSS files and JavaScript.
4. Set Up Redirects: To ensure that all users land on the secure version of your site, set up 301 redirects from HTTP to HTTPS. This will also prevent any negative impact on your SEO from changing the URL structure.
5. Update Google Search Console: Add the HTTPS version of your site to Google Search Console. This will help Google re-crawl your site and recognise the new secure URLs.
6. Monitor Your Site: After switching, monitor your site’s performance and security settings to ensure the SSL certificate is working correctly. Google Chrome should now show the padlock symbol, indicating that your site is secure.

Google to Flag HTTP as Unsecure from July

Switching to HTTPS is no longer just a nice-to-have; it’s fast becoming essential for businesses that want to maintain customer trust, comply with data regulations like GDPR and avoid penalties in search rankings. With Google’s upcoming Chrome update, sites that don’t make the switch will risk being visibly flagged as unsecure, which may discourage users from interacting or transacting on your site.

While there might be some upfront work involved in setting up HTTPS, the long-term benefits to your site’s credibility and security are well worth the investment. At The Last Hurdle, we recommend acting sooner rather than later to protect your business, improve user trust and ensure you’re keeping pace with the latest online standards.

If you need assistance implementing an SSL certificate or transitioning your site to HTTPS, our team is here to help. Reach out to us at The Last Hurdle for advice on keeping your site secure and competitive, call us on 01604 654545 or email hello@thelasthurdle.co.uk