Do I Need To Secure My Web Site?

There has been a lot of concern over securing web sites lately with all the hacking that has been reported. The news has been all over about the GDRP (the what?), and Google now requires HTTPS/SSL (the who?) whenever any sensitive information is collected from your web site.

Are you confused enough yet?

This is seriously techy-nerdy stuff, but it is not intentionally meant to confuse you. So here is what it all means in (hopefully) non-techy-nerd speak.

First: Google requires HTTPS/SSL on web sites or they won’t show up on search engines: FALSE (kind of).

HTTPS/SSL is a lock on your web site. Think of a lock that has a 256 number combination. HTTPS is an electronic lock to make it more difficult for bad guys to get into your web site. And, like any lock, they range in price. But the kicker is that all these locks are the same, the price difference is just what store you go to.
You can get a HTTPS lock for your web site from KoolWebHosting.com for under $70 per year. Click here to get more information or to purchase a HTTPS / SSL lock for your web site.

But don’t listen to the fear mongers that say Google will kick you out of the search engines if you don’t have this for your web site. This is completely FALSE.

HOWEVER, it is TRUE that Google ranks web sites HIGHER in their search engine if a web site does have an SSL security lock on it, whether or nor you sell anything online. So, even if you do not ask for any sensitive information on that web site. Yes, it is stupid. But if under $70 per year will help you get higher in the search engines, it’s cheap SEO.

And your customers may care a great deal. If you do collect sensitive information, you may be vulnerable to being hacked without that lock. Get it, what other insurance costs less than $5.50 per month (our certificates are backed with a $100,000 warranty)?

Here is an article from the Search Engine Journal that talks more about Google and HTTPS/SSL.

“So great,” you say, “But what about this GDRPTIBD whatever?”

GDRP is a law from Europe, just like internet laws we have in the US. GDRP, or General Data Protection Regulation, is a set of rules web sites must comply with IF (IF) they work with people in the European Union. If you are a Los Angeles company, and you sell as far away as New York, this doesn’t apply to you. If you ship to or from Asia, this has nothing to do with you.

You only need to be concerned with the GDRP if you do business with the European Union. Here is a Wikipedia article on the GDRP if you are interested.

To recap: You do not need to secure your web site if you are gathering person’s name, phone number, and email address; that information is not considered to be “sensitive.” But Google WILL rank a web site higher if it does have the “HTTPS,” even if you don’t have sensitive information. So, you should be securing your web site whether or not you ask for sensitive information.
And remember, getting security for your web site will never hurt. When in doubt, get it.

Dr. Ty Belknap, Port Bell SEO

Photo courtesy of Markus Spiske