Site Not Served Over HTTPS

High

Your website is accessible over unencrypted HTTP, meaning all data between users and your server is transmitted in plaintext.

Risk

Any data sent over HTTP (passwords, credit cards, personal information, cookies) can be intercepted and read by anyone on the network path — ISPs, Wi-Fi hotspot operators, or attackers. HTTP also allows content injection: attackers can modify your pages in transit to insert ads, malware, or phishing content. Google penalizes HTTP sites in search rankings.

Solution

Obtain an SSL/TLS certificate (free via Let's Encrypt) and configure your server to serve all content over HTTPS. Redirect all HTTP requests to HTTPS. Update all internal links and resources to use HTTPS URLs.

Example

# Nginx redirect
server {
  listen 80;
  return 301 https://$host$request_uri;
}

Why HTTPS Matters - Google Let's Encrypt

Comments (0)

No messages yet.