Category: SSL & HTTPS
Installing an SSL certificate on Site5
Site5.com does not support free LetsEncrypt certificates and only offers paid SSL certificates with their hosting plans. This means you do not use the Really Simple SSL wizard to install an SSL certificate on your website. Really Simple SSL will still assist you in making sure all your content is served over SSL en properly configure other relevant SSL & security settings. You will need to order an ssl certificate and install it manually. The installation instructions depend on the
The Chrome lock icon deprecated in September 2023
The Chrome lock icon is on its way out. When Really Simple SSL started many years ago, more than 50% of the Chrome page loads did not use HTTPS. On a broader spectrum, the web was not encrypted by SSL/TLS for even less than that, topping a mere 14% in 2013. This year Chrome is expecting a stable coverage of 99% of page loads to be over HTTPS. But why is the lock being replaced? The padlock icon instills a
How to add set CAA records to allow Lets Encrypt to generate certificates
As a security measure, the ability to issue SSL certificates can be restricted to specific Certificate Authorities by using CAA records. By setting up the appropriate CAA records for your domain, you’re ensuring that Let’s Encrypt can issue certificates for your domain, while also preventing other certificate authorities from doing so without your authorization. For more info on CAA records read this arcticle When Really Simple SSL detects a CAA record that will prevent let Let’s Encrypt from issuing a
Steps to take after migrating to SSL
Step 1. Mixed Content Scan After installing Really Simple SSL and activating SSL, it is still possible that your site is flagged as not secure. The most common cause for this is ‘Mixed content’. If you do not see the secure lock in your browser address bar, you still have mixed content. It is very important that this is fixed because browsers will throw all sorts of warnings at users, who might get scared. Learn more about mixed content Step 2.
Using the Mixed Content Scan
If your site has a valid SSL certificate but is still reported as insecure in browsers, this could be because it contains “Mixed Content” (HTTP content loaded on a HTTPS website). The built-in Mixed Content fixer in Really Simple SSL will dynamically fix all of the Mixed Content in the HTML of your site. If you have the Mixed content fixer enabled, but your site is still marked as insecure: you possibly have a type of mixed content that could