Protecting data in transit.
WHAT HTTPS DOES
Encrypts traffic between visitor and server.
WHAT THAT PREVENTS
Interception of passwords, form submissions and payment details on the network.
WHY IT MATTERS ON PUBLIC NETWORKS
Traffic on an open network can be read without it.
WHAT TO SET UP
AutoSSL, covering every domain and subdomain.
WHAT TO CHECK
Every page loads securely HTTP redirects to HTTPS No mixed content warnings
MIXED CONTENT
A secure page loading an insecure resource.
Breaks the padlock and produces a warning.
WHAT ELSE TO ENCRYPT
Your FTP connections, using FTPS or SFTP.
Plain FTP sends your password unencrypted.
YOUR OWN CONNECTION
Avoid administering your site over untrusted networks.
If you must, ensure everything is encrypted.
WHAT HTTPS DOES NOT DO
Protect a site from being compromised.
It protects traffic, not the site.
