WordCamp Philly 2015

Nuggets I Returned Home With

Matt RyanCap Web Solutions

Advanced Topics in WordPress Development

- Andrew Nacin

❖ https - aka http over TLS➢ Secure version of http➢ Combination of http and Transport Layer

Security (TLS)➢ Secures the communication pipe NOT the

endpoints

❖ https, TLS & SSL <> website security

What’s The Rush

“Agencies must make all existing websites and services accessible

through a secure connection (HTTPS-only, with HSTS) by

December 31, 2016.”

❖ https://https.cio.gov/apis/ - US Gov’s memo on requiring access to Federal sites to use secure connections➢ web-friendly

❖ Google’s Webmaster Central blog - posted on August 06, 2014 “ … we're starting to use HTTPS as a ranking signal … ”

Tips to Get Started with https

❖ Determine kind of certificate needed (single, multiple, wildcard)

❖ 2048-bit key certificates

❖ Relative URLs for resources on same secure domain

❖ Protocol relative URLs for all other domains

❖ Check out Google’s Site move article for guidelines

Takeaways❖ Move my clients to HTTPS

➢ Price not deciding factor➢ Simplicity of installation

❖ Good sites ➢ ssllabs.com for testing ➢ sslmate.com for cost effective certs

❖ Volunteering was cool➢ Good People && Fun && Different Perspective

Awesome

swag

Referenced Resources

Perez rant on SSL and website security => http://perezbox.com/2015/07/https-does-not-secure-your-website/#

Google’s Announcement of SSL as Ranking Component => http://googlewebmastercentral.blogspot.com/2014/08/https-as-ranking-signal.html

Secure Your Site With HTTPS => https://support.google.com/webmasters/answer/6073543?utm_source=wmx_blog&utm_medium=referral&utm_campaign=tls_en_post

Move A Site With URL Changes => https://support.google.com/webmasters/answer/6033049?utm_source=wmx_blog&utm_medium=referral&utm_campaign=tls_en_post