You've surely noticed the little padlock to the left of the address of the sites you visit. It seems trivial, yet today it determines your visitors' trust, your ranking and even the plain accessibility of your site. Here's what every business owner needs to understand about HTTPS.
HTTPS, HTTP, SSL: what are we talking about?
The "S" in HTTPS stands for Secure. Concretely, an SSL certificate encrypts the exchanges between your visitor's browser and your site: the information transmitted (a form, a message) cannot be intercepted and read by a third party. The green padlock is the visible symbol of this secure connection.
Without HTTPS, your site shows "Not secure"
This is the most concrete point. Modern browsers (Chrome, Safari, Firefox) display a "Not secure" warning on any site without HTTPS. Imagine the effect on a customer discovering your restaurant: that single word is enough to drive them away, and to cast doubt on your entire establishment.
Google favors secure sites
HTTPS has been an official Google ranking criterion for years. With equal content, a secure site will be preferred over one that isn't. Not having HTTPS therefore means both losing visitors' trust and penalizing yourself in search results.
Trust, especially if you collect information
As soon as your site has a contact form, a booking or, even more so, a payment, HTTPS becomes non-negotiable. Your customers entrust data; they must have the guarantee that it travels securely. It's a matter of responsibility as much as image.
Good news: HTTPS is simple and often free
Ten years ago, an SSL certificate was expensive. Today, thanks to initiatives like Let's Encrypt, it's free and most serious hosts include it and renew it automatically. I detail this point in my hosting guide. So there's no longer any reason to go without it.
How to check that your site is properly in HTTPS
Open your site and look at the address: it should begin with https:// and show a padlock. Click on it to check that the certificate is valid and not expired. An expired certificate is almost worse than no certificate at all: it triggers a big red alert that outright blocks access.
Frequently asked questions
Is HTTPS mandatory for a showcase site with no payment?
In practice, yes. Even without payment, the absence of HTTPS triggers the "Not secure" warning and penalizes your ranking. It's now an unavoidable standard.
How much does an SSL certificate cost?
Usually nothing: free certificates (Let's Encrypt) offer the same level of encryption as paid ones and are more than enough for a showcase site.
What should I do if my certificate has expired?
It must be renewed as quickly as possible, because an expired certificate blocks access to the site. The ideal is hosting that manages this renewal automatically, so you never have to think about it.
Not sure your site is properly secured? Get in touch: I'll check your HTTPS and make sure everything is in order.