In 2014, it was about Ranking Signal. Starting 2017, it’s going to be ugly.
Ranking on Google search will most probably drop if website owners still refuse to install SSL on websites by 2017. Not just that, users will be alerted when visiting an address that doesn’t use an encrypted connection. Won’t be too nice if that happens.
Credit: Images by Google. Content extracted from CNN Money
Google wants to make the Internet safer, and it won’t be shy about pointing fingers at sites that don’t meet its standards.
In an announcement published to the Google Security Blog on Thursday, the search giant said users of its Chrome browser will be warned when accessing non-secure websites, starting January 2017.
Users won’t be blocked from accessing non-secure sites, but they will be alerted when visiting an address that doesn’t use an encrypted connection.
Websites with a “HTTPS” added before the URL indicate an added level of security to normal web browsing, compared to visiting a non-secure “HTTP” connection. This guarantees users are reaching the website they intend to visit, and the extra security protects them against hackers.
“When you load a website over HTTP, someone else on the network can look at or modify the site before it gets to you,” Google explained in the statement.
Currently, the search engine indicates that HTTPS — note the “s” on the end — connections are secure with a green lock icon (broken HTTPS connections feature a red lock). However, Google (GOOG) does not currently flag HTTP connections as unsafe, though users can click on the information tab on HTTP sites to learn more about the connection.
The next-generation version of Chrome, called Chrome 56, will start to mark HTTP connections as “not secure.”
“Studies show that users do not perceive the lack of a ‘secure’ icon as a warning, but also that users become blind to warnings that occur too frequently,” Google explains. To avoid warning fatigue, Google will roll out its warnings gradually, eventually alerting users in Chrome’s Incognito mode — which doesn’t store users’ search histories — that HTTP connections are not secure with a flashier image.
Google said “more than half of Chrome desktop page loads are now served over a secure network.” But only one-third of the top 100 non-Google sites use a secure connection as its default.
Emily Schechter, Product Manager for Chrome Security, told CNNMoney only a handful of those top 100 non-Google sites have switched to a secure connection this year. “We have seen an additional 12 sites move to HTTPS by default [since March],” she said.
Google hinted at the move years ago and reiterated the plan in January 2016. The announcement comes months ahead of the move to allow developers and sites enough time to migrate from to HTTPS before the change kicks in, Schechter explained. Switching over from HTTP won’t affect sites’ search rankings.
Google’s Official Release
2016 Release — Moving towards a more secure web
2014 Release — HTTPS as a ranking signal
At Krome, we specialise in website design and development services. If you or your client are interested in creating a site, it’s time to tell us about your project or have a chat about what we can do. You can contact us here.