The Coral Cliffs Web Design blog
Why your site needs the padlock
SSL certificates used to be optional. Now browsers warn visitors away from sites without one. Here is what that little padlock does.
Look at the address bar on this page. See the small padlock, or the word "https" at the start of the address? That means the connection between your browser and our server is encrypted with an SSL certificate (technically TLS, but everyone still says SSL).
What it protects
Without encryption, anything typed into a website travels across the internet as plain text. On public Wi-Fi in a café or hotel, that can be read by someone on the same network. Contact forms, booking details and login passwords are all exposed.
With SSL, that information is scrambled in transit, so only your server can read it.
Why it matters even if you don't take payments
Plenty of small business owners assume SSL is only for online shops. Not any more:
- Browsers warn visitors. Chrome, Safari and Firefox label sites without SSL as "Not secure." Many customers will leave rather than risk it.
- Search engines prefer it. Google has used HTTPS as a ranking signal for years.
- Modern features require it. Things like maps that use a visitor's location only work over HTTPS.
Certificates expire
An SSL certificate isn't a one-time purchase. Certificates expire, typically every few months, and an expired one is arguably worse than none: visitors get a full-screen warning telling them your site may be dangerous.
That's why we install and renew certificates automatically for every site we host. You shouldn't have to put a reminder in your calendar to keep your website trustworthy.
How to check yours
Visit your website and look at the address bar. If you see "Not secure," or if the address starts with http:// rather than https://, give us a call. Fixing it is usually a ten-minute job.
Edit src/content/posts/why-your-site-needs-the-padlock.md