SSL/TLS Certificates
Published
SSL (Secure Sockets Layer) certificates are what enable and make the "https://" in your website's address work. When SSL is enabled, your visitors' browser traffic to your website is encrypted so that other people on the network cannot read or alter what's being sent.
Modern websites actually use TLS (Transport Layer Security). For the most part, SSL and TLS are used interchangeably.
Here's why your website should have a SSL/TLS certificate:
Encrypts traffic: This is especially important for sites that collect sensitive information like login credentials or payment details. Without encryption, that data is vulnerable to interception.
Proves your site's identity: The certificate shows the browser that it is really connected to your domain, not a fake site impersonating yours.
Prevents browser warnings: When connecting to a non secured site most browsers will show a big red warning explaining your site's not secure and that the user's data is at risk and may be intercepted. Having a SSL/TLS certificate avoids this warning screen.
SEO: Sites that don't have a valid SSL/TLS certificate don't rank well with Search engines like Google. Having a SSL/TLS certificate improves your search engine visibility.
Why you shouldn't pay for a SSL/TLS certificate:
Most hosting providers like GoDaddy, Namecheap, etc, offer bundled in certificates with your site/domain when you purchase one of their plans, this bundle is usually free for 1 year, but after the year passes it's set to autorenew for a price ranging anywhere from $10 to $200 per year.
Why don't we charge you for SSL certificates? Because they are free.
Trusted services like letsencrypt.org provide free SSL certificates that are automatically renewed and are suitable for most websites. The set up can be automated depending on your hosting provider, or it might require a small technical set up. We use these certificates for the sites we host, ensuring our clients have their sites secured with valid SSL certificates that auto renew at no cost.
A quick checklist to know if your site has a good SSL setup:
Your site loads on https:// without errors.
Visiting http:// automatically redirects to https://.
All page resources also load via HTTPS (images, scripts, fonts). If some still load over HTTP, you can get "mixed content" warnings.
Renewals are automated so the certificate does not expire unexpectedly.
Bottom line
HTTPS is mandatory for trust and security. SSL/TLS certificates enable HTTPS on your site, and you shouldn't pay extra to have a SSL/TLS certificate