Websites Without HTTPS Now Flagged As Insecure

Google has been warning website owners for years that they will soon prefer HTTPS (Hypertext Transfer Protocol Secure) traffic over HTTP. These changes have officially taken place. Now, all HTTP traffic is viewed as insecure.

If you use the Google Chrome browser, you’ve probably already visited at least one website that your browser told you was “Not secure.” It is difficult to miss these warnings since Google Chrome displays it right next to the website’s URL. This can lead to trust issues with customers, or people visiting your website.

What does HTTP vs HTTPS even mean?
A simple way to think of HTTPS vs HTTP and insecure pages is this example.

You and your friend are sitting in the middle of a busy coffee shop and your friend tells you a secret. Everyone around you can hear it, and therefore, it’s probably not a secret anymore.

Now, imagine that you and your friend are at the same coffee shop. You tell her the same secret, but this time you tell it quietly and in a secret language only you and she understand. In this case, it is very unlikely that anyone listening would hear anything that makes sense.

That is an easy way to understand the difference between a page served over HTTP  and a page served over a secure HTTPS page.

What are the risks of an insecure page?
For some websites, this may not be a problem. This is the risk you need to decide for yourself. Is your website serving or gathering any content that would be detrimental if it was accessed by someone other than yourself or your viewers? If the answer is yes, you should really look into getting an SSL Certificate for your website.

What is an SSL Certificate?
SSL stands for secure socket layer. This means that your domain is given a secure connection between it, the Internet browser and the web server. This allows websites to transmit private data online. It does this by encrypting the information between the user and server so that third parties can’t hack the information. SSL certificates verify the identity of the user and the web server. You can tell what websites have an SSL because the HTTP will end with an S, making it an HTTPS.

No-IP Offers 3 Different Types of SSL Certificates
At No-IP we offer three different SSL certificates. Our certificates are issued through Geotrust and include a RapidSSL, RapidSSL Wildcard, and a GeoTrust QuickSSL Premium.

RapidSSL’s are perfect for websites that have low volume or low dollar value transactions. They offer comprehensive authentication procedures (domain name and identity verification) for a higher level of security.

Premium certificates should be used for websites with medium to high volume of online sales. Just like the RapidSSL, Premium offers comprehensive authentication procedures and verification, but for the highest level of security.

Wildcard certificates are useful if you need more that one hostname protected by an SSL. It gives the same protection at the Premium SSL but can cover unlimited hostnames. For example, if you are using domain.com and want store.domain.com and login.domain.com protected, a Wildcard SSL would handle that.

You can learn more about our SSL certificate offerings here: SSL Certificates

How to Install an SSL Certificate
All certificates issued by No-IP use automatic authentication and issuance at an affordable price. You can check out this guide to learn more about how to install an SSL certificate.

I have a Free or Enhanced Dynamic DNS Hostname, Can I Add an SSL Certificate to It?
Unfortunately, this is not possible since we do not approve SSL certificates on our Free and Enhanced domains.

One option is to make a self-signed certificate for your servers. This will prompt visitors with a security warning and they would be able to accept the security exception. The connection is still secure, you just don’t have a third-party verifying the chain of trust.

If you would like a domain with a verified SSL certificate, you will need to register your own domain name and purchase Plus Managed DNS. You will also need to purchase a RapidSSL or GeoTrust QuickSSL Premium Certificate for your domain name. This will give you full control of the domain, DNS and verification of the SSL Certificate.

Please note, some hostname targets like some IP cameras, DVRs, or other devices/apps may not support the ability to install an SSL cert. If this is the case, your hostname will still resolve, and you can still access it, the content will just be insecure.

Don’t leave your customers and website visitors second guessing how safe your site is to use. SSL certificates are an easy and inexpensive way to add an extra layer of security to your website and give your customers the peace of mind they are looking for. Our SSL certificates range from $20 to $180 dollars and can be purchased here.

Have questions or need help? Open a Support Ticket or give us a call at +1-775-853-1883. Our Customer Support team would love to help!