On The Road To HTTPS Everywhere / BrightonSEO 2017

SearchDatalogy
SearchDatalogySearchDatalogy
Aysun Akarsu
SEARCHDATALOGY
On the road to HTTPS
Everywhere
@aysunakarsu
https://www.searchdatalogy.com/blog/brightonseo/
@aysunakarsu @searchdatalogy #brightonseo
1
HTTPS
HyperText Transfer Protocol
Secure
@aysunakarsu @searchdatalogy #brightonseo
Transport Layer Security
Secure Sockets Layer (SSL)
Transport Layer Security (TLS)
@aysunakarsu @searchdatalogy #brightonseo
Transport Layer Security
Authentication
Encryption
Integrity
@aysunakarsu @searchdatalogy #brightonseo
2
Benefits
@aysunakarsu @searchdatalogy #brightonseo
Your
content
& design
Users
Experience
HTTPS ensures on your site
What
intruders
may
provide
@aysunakarsu @searchdatalogy #brightonseo
HTTPS protects
SecurityPrivacy
USERS
@aysunakarsu @searchdatalogy #brightonseo
HTTP/2 requires HTTPS
@aysunakarsu @searchdatalogy #brightonseo
Brotli requires HTTPS
@aysunakarsu @searchdatalogy #brightonseo
Not all but some AMP require
HTTPS
@aysunakarsu @searchdatalogy #brightonseo
HTTPS enables on the web
@aysunakarsu @searchdatalogy #brightonseo
Service Workers require
HTTPS
@aysunakarsu @searchdatalogy #brightonseo
HTTPS enables
Referrer data
(from HTTPS sites)
@aysunakarsu @searchdatalogy #brightonseo
Google’s mission
3
@aysunakarsu @searchdatalogy #brightonseo
“We're committed to making the web
a safer place not only for Google users,
but for all users. HTTPS makes it
difficult for Internet Service Providers,
governments and others to watch
what you're doing online.”
Google
@aysunakarsu @searchdatalogy #brightonseo
Motivating HTTPS migration
By SEO
@aysunakarsu @searchdatalogy #brightonseo
Motivating HTTPS migration
By Chrome
1. HTTP2
2. Marking HTTP sites
@aysunakarsu @searchdatalogy #brightonseo
Migration dates
Top sites
@aysunakarsu @searchdatalogy #brightonseo
Among top sites
Google was one of the
First in
Moving to HTTPS
Last in
Bringing HSTS
@aysunakarsu @searchdatalogy #brightonseo
HTTPS on top 100 non Google sites
@aysunakarsu @searchdatalogy #brightonseo
Percentage of Web pages loaded by
Firefox using HTTPS
@aysunakarsu @searchdatalogy #brightonseo
4
TLS certificates
@aysunakarsu @searchdatalogy #brightonseo
Type of TLS certificates
Domain Validation Organization Validation
Extended Validation
By validation level
@aysunakarsu @searchdatalogy #brightonseo
Type of TLS certificates
By secured domains
Single Name
https://www.firstsite.com
Wildcard
https://www.firstsite.com
https://blog.firstsite.com
https://shop.firstsite.com
Multi-domain
https://www.firstsite.com
https://www.secondsite.com
https://www.thirdsite.com
@aysunakarsu @searchdatalogy #brightonseo
5
HSTS
HTTP Strict Transport
Security
@aysunakarsu @searchdatalogy #brightonseo
HSTS
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
In seconds
Optional
(Recommended)
Optional
@aysunakarsu @searchdatalogy #brightonseo
HSTS
chrome://net-internals/#hsts
@aysunakarsu @searchdatalogy #brightonseo
HSTS
https://chromium.googlesource.com/chromium/src/+/
master/net/http/transport_security_state_static.json
{ "name": "wikipedia.org", "include_subdomains": true, "mode": "force-https" },
{ "name": "www.facebook.com", "include_subdomains": true, "mode": "force-https", "pins": "facebook" },
{ "name": "facebook.com", "mode": "force-https", "pins": "facebook" },
{ "name": "twitter.com", "mode": "force-https", "pins": "twitterCom" },
{ "name": "www.twitter.com", "include_subdomains": true, "mode": "force-https", "pins": "twitterCom" },
Chrome HSTS preload list
@aysunakarsu @searchdatalogy #brightonseo
6
Before
@aysunakarsu @searchdatalogy #brightonseo
Choose well your
IT infrastructure
https://istlsfastyet.com/
https://istlsfastyet.com/
@aysunakarsu @searchdatalogy #brightonseo
If using SNI
Check web servers & browsers support
@aysunakarsu @searchdatalogy #brightonseo
Consider HTTP2
https://www.nginx.com/blog/supporting-http2-google-chrome-users/
@aysunakarsu @searchdatalogy #brightonseo
Plan only HTTPS migration
https://www.seroundtable.com/google-url-structures-https-23084.html
@aysunakarsu @searchdatalogy #brightonseo
HTTPS
No access to users & bots
@aysunakarsu @searchdatalogy #brightonseo
Get (staging)
TLS certificate
@aysunakarsu @searchdatalogy #brightonseo
Configure (staging)
https://mozilla.github.io/server-side-tls/ssl-config-generator/
@aysunakarsu @searchdatalogy #brightonseo
Prevent & report
Content-Security-Policy: upgrade-insecure-requests;
Content-Security-Policy-Report-Only: default-src https:;
report-uri /csp-logs
Mixed content
@aysunakarsu @searchdatalogy #brightonseo
Preserve referrer
Referrer-Policy: origin-when-cross-origin
Referrer-Policy: origin
Referrer-Policy
@aysunakarsu @searchdatalogy #brightonseo
Collect data
Staging
Production
Crawl sites
Web server logs
Analytics tools
E.g. Google Analytics
Google search
console
External Links
E.g. Majestic
@aysunakarsu @searchdatalogy #brightonseo
Analyze data (staging)
Urls of the links, web
assets on the page
Url of the page
Scheme
(protocol)
Tags
Canonical
Hreflang
Meta
HTTP Headers
Status code
Content
On each page check
@aysunakarsu @searchdatalogy #brightonseo
Analyze data (production)
Pages
Error
Low quality content
Orphan
Crawl waste
@aysunakarsu @searchdatalogy #brightonseo
Prepare
Migration section planning
(If moving in sections)
URL list
Mapping
Monitoring
Update
HTTP
HTTPS
Sitemaps
@aysunakarsu @searchdatalogy #brightonseo
SSLLabs
https://www.ssllabs.com/ssltest/analyze.html?d=www.searchdatalogy.com
@aysunakarsu @searchdatalogy #brightonseo
Mozilla TLS observatory
https://observatory.mozilla.org/
@aysunakarsu @searchdatalogy #brightonseo
Register (destination site)
Google Search Console
https://example.com
https://www.example.com
https://m.example.com (If mobile on the origin)
https://fr.example.com (If subdomains on the origin)
https://www.example.com/fr/ (If directories on the origin)
@aysunakarsu @searchdatalogy #brightonseo
Configure (destination site)
Analytics tools
E.g. Google Analytics
Google
search
console
Urls parameters
Geotargeting
Disavow
Preferred domain
Submit sitemaps
Replicate origin’s
configuration
@aysunakarsu @searchdatalogy #brightonseo
7
Ready ?
@aysunakarsu @searchdatalogy #brightonseo
Give users & bots access to
HTTPS
@aysunakarsu @searchdatalogy #brightonseo
Implement redirects
HTTPSHTTP
@aysunakarsu @searchdatalogy #brightonseo
Collect & analyze data
Web server logs
Crawl
Production site
Analytics tools
E.g. Google Analytics
@aysunakarsu @searchdatalogy #brightonseo
Update urls
Owned media
Profile links
E.g. Facebook, Twitter, Linkedin
Partner sites
Ad campaigns
@aysunakarsu @searchdatalogy #brightonseo
8
After
@aysunakarsu @searchdatalogy #brightonseo
Collect / monitor / analyze
data
Sitemaps
Production site
Crawl
Web server logs
Analytics tools
E.g. Google Analytics
Google search
console
External Links
E.g. Majestic
@aysunakarsu @searchdatalogy #brightonseo
Implement HSTS
Start HSTS
max-age=300;includeSubDomains
Increase max-age progressively
max-age=604800; includeSubDomains
max-age=2592000; includeSubDomains
Chrome HSTS preload list
max-age=63072000;
includeSubDomains; preload
@aysunakarsu @searchdatalogy #brightonseo
“Protecting less sensitive
sites strengthens the
protections of more
sensitive sites.”
https://https.cio.gov/
“The good we secure for
ourselves is precarious
and uncertain until it is
secured for all of us and
incorporated into our
common life.”
Jane Addams
Thank
you!
1 of 58

Recommended

Technical SEO - Generational cruft in SEO - there is never a new site when th... by
Technical SEO - Generational cruft in SEO - there is never a new site when th...Technical SEO - Generational cruft in SEO - there is never a new site when th...
Technical SEO - Generational cruft in SEO - there is never a new site when th...Dawn Anderson MSc DigM
18.4K views128 slides
How Google Tag Manager can save your seo ? - Talk for Brighton SEO 2017 by
How Google Tag Manager can save your seo ? - Talk for Brighton SEO 2017How Google Tag Manager can save your seo ? - Talk for Brighton SEO 2017
How Google Tag Manager can save your seo ? - Talk for Brighton SEO 2017Woptimo
8.1K views35 slides
Quality PR Linkbuilding - With Terrible Budget (BrightonSEO, September 2017) by
Quality PR Linkbuilding - With Terrible Budget (BrightonSEO, September 2017)Quality PR Linkbuilding - With Terrible Budget (BrightonSEO, September 2017)
Quality PR Linkbuilding - With Terrible Budget (BrightonSEO, September 2017)Ben Harrow
6K views42 slides
Brighton SEO 2017: Six Kick Ass Content Strategies - Laura Hampton by
Brighton SEO 2017: Six Kick Ass Content Strategies - Laura HamptonBrighton SEO 2017: Six Kick Ass Content Strategies - Laura Hampton
Brighton SEO 2017: Six Kick Ass Content Strategies - Laura HamptonLaura Hampton
6.4K views53 slides
Product Feed Research: What we learned from indexing 500m SKUs by
Product Feed Research: What we learned from indexing 500m SKUsProduct Feed Research: What we learned from indexing 500m SKUs
Product Feed Research: What we learned from indexing 500m SKUsBen Morgan
4.6K views27 slides
Brighton SEO - Getting a competitive advantage on ebay by
Brighton SEO - Getting a competitive advantage on ebayBrighton SEO - Getting a competitive advantage on ebay
Brighton SEO - Getting a competitive advantage on ebayDarren Ratcliffe
5K views26 slides

More Related Content

Viewers also liked

BrightonSEO - Influencer Marketing - Allyson Griffiths iCrossing by
BrightonSEO - Influencer Marketing - Allyson Griffiths iCrossingBrightonSEO - Influencer Marketing - Allyson Griffiths iCrossing
BrightonSEO - Influencer Marketing - Allyson Griffiths iCrossingAllyson Griffiths
6.3K views36 slides
Kostas Voudouris - BrightonSEO - Perfromance-based optimisation using Google ... by
Kostas Voudouris - BrightonSEO - Perfromance-based optimisation using Google ...Kostas Voudouris - BrightonSEO - Perfromance-based optimisation using Google ...
Kostas Voudouris - BrightonSEO - Perfromance-based optimisation using Google ...kvonweb
18.8K views20 slides
Creating more human experiences with chatbots by
Creating more human experiences with chatbotsCreating more human experiences with chatbots
Creating more human experiences with chatbotsJonathan Seal
4.9K views40 slides
Matching Keywords to Pages - Information Architecture by
Matching Keywords to Pages - Information ArchitectureMatching Keywords to Pages - Information Architecture
Matching Keywords to Pages - Information ArchitectureDominic Woodman
9K views125 slides
SPEAK EASY: THE RISE OF VOICE SEARCH (Mindshare Fast - Brighton SEO 2017) by
SPEAK EASY: THE RISE OF VOICE SEARCH (Mindshare Fast - Brighton SEO 2017)SPEAK EASY: THE RISE OF VOICE SEARCH (Mindshare Fast - Brighton SEO 2017)
SPEAK EASY: THE RISE OF VOICE SEARCH (Mindshare Fast - Brighton SEO 2017)Saeley-Ewan Johnson jnr
7.8K views19 slides
BrightonSEO Slides - Blogging advice that'll make your job easier - guaranteed! by
BrightonSEO Slides - Blogging advice that'll make your job easier - guaranteed!BrightonSEO Slides - Blogging advice that'll make your job easier - guaranteed!
BrightonSEO Slides - Blogging advice that'll make your job easier - guaranteed!Sam Charles
5.4K views37 slides

Viewers also liked(19)

BrightonSEO - Influencer Marketing - Allyson Griffiths iCrossing by Allyson Griffiths
BrightonSEO - Influencer Marketing - Allyson Griffiths iCrossingBrightonSEO - Influencer Marketing - Allyson Griffiths iCrossing
BrightonSEO - Influencer Marketing - Allyson Griffiths iCrossing
Allyson Griffiths6.3K views
Kostas Voudouris - BrightonSEO - Perfromance-based optimisation using Google ... by kvonweb
Kostas Voudouris - BrightonSEO - Perfromance-based optimisation using Google ...Kostas Voudouris - BrightonSEO - Perfromance-based optimisation using Google ...
Kostas Voudouris - BrightonSEO - Perfromance-based optimisation using Google ...
kvonweb18.8K views
Creating more human experiences with chatbots by Jonathan Seal
Creating more human experiences with chatbotsCreating more human experiences with chatbots
Creating more human experiences with chatbots
Jonathan Seal4.9K views
Matching Keywords to Pages - Information Architecture by Dominic Woodman
Matching Keywords to Pages - Information ArchitectureMatching Keywords to Pages - Information Architecture
Matching Keywords to Pages - Information Architecture
Dominic Woodman9K views
SPEAK EASY: THE RISE OF VOICE SEARCH (Mindshare Fast - Brighton SEO 2017) by Saeley-Ewan Johnson jnr
SPEAK EASY: THE RISE OF VOICE SEARCH (Mindshare Fast - Brighton SEO 2017)SPEAK EASY: THE RISE OF VOICE SEARCH (Mindshare Fast - Brighton SEO 2017)
SPEAK EASY: THE RISE OF VOICE SEARCH (Mindshare Fast - Brighton SEO 2017)
BrightonSEO Slides - Blogging advice that'll make your job easier - guaranteed! by Sam Charles
BrightonSEO Slides - Blogging advice that'll make your job easier - guaranteed!BrightonSEO Slides - Blogging advice that'll make your job easier - guaranteed!
BrightonSEO Slides - Blogging advice that'll make your job easier - guaranteed!
Sam Charles5.4K views
BrightonSEO 2017- Harnessing your Reputation to win New Customers by Myles Anderson
BrightonSEO 2017- Harnessing your Reputation to win New CustomersBrightonSEO 2017- Harnessing your Reputation to win New Customers
BrightonSEO 2017- Harnessing your Reputation to win New Customers
Myles Anderson5.6K views
BrightonSEO 2017 - SEO quick wins from a technical check by Chloe Bodard
BrightonSEO 2017  - SEO quick wins from a technical checkBrightonSEO 2017  - SEO quick wins from a technical check
BrightonSEO 2017 - SEO quick wins from a technical check
Chloe Bodard8.9K views
The SEO's Guide To JavaScript - Ric Rodriguez, Brighton SEO 2017 by Ric Rodriguez
The SEO's Guide To JavaScript - Ric Rodriguez, Brighton SEO 2017The SEO's Guide To JavaScript - Ric Rodriguez, Brighton SEO 2017
The SEO's Guide To JavaScript - Ric Rodriguez, Brighton SEO 2017
Ric Rodriguez7K views
Brighton SEO - 7 Questions to ask before you start digital marketing by Andi Jarvis
Brighton SEO - 7 Questions to ask before you start digital marketingBrighton SEO - 7 Questions to ask before you start digital marketing
Brighton SEO - 7 Questions to ask before you start digital marketing
Andi Jarvis6.6K views
Better conversion with Intelligent Analytics by Tim Stewart
Better conversion with Intelligent AnalyticsBetter conversion with Intelligent Analytics
Better conversion with Intelligent Analytics
Tim Stewart6.2K views
Robots: Txt, Meta & X - The Snog, Marry & Avoid of the Web Crawling World - B... by Chris Green
Robots: Txt, Meta & X - The Snog, Marry & Avoid of the Web Crawling World - B...Robots: Txt, Meta & X - The Snog, Marry & Avoid of the Web Crawling World - B...
Robots: Txt, Meta & X - The Snog, Marry & Avoid of the Web Crawling World - B...
Chris Green7.2K views
HOW TO INCREASE YOUR TRAFFIC 5X WITH THIS ONE SEO METHOD by Christoph C. Cemper
HOW TO INCREASE YOUR TRAFFIC 5X WITH THIS ONE SEO METHODHOW TO INCREASE YOUR TRAFFIC 5X WITH THIS ONE SEO METHOD
HOW TO INCREASE YOUR TRAFFIC 5X WITH THIS ONE SEO METHOD
Christoph C. Cemper15.1K views
Setting AMP for Success at #BrightonSEO by Aleyda Solís
Setting AMP for Success at #BrightonSEOSetting AMP for Success at #BrightonSEO
Setting AMP for Success at #BrightonSEO
Aleyda Solís16.5K views
Keyword Research Tactics and Tools - BrightonSEO 2017 by Stacey MacNaught
Keyword Research Tactics and Tools - BrightonSEO 2017Keyword Research Tactics and Tools - BrightonSEO 2017
Keyword Research Tactics and Tools - BrightonSEO 2017
Stacey MacNaught11.4K views
Amazon Sponsored Ads: Beyond Basics by Daytodayebay
Amazon Sponsored Ads: Beyond Basics Amazon Sponsored Ads: Beyond Basics
Amazon Sponsored Ads: Beyond Basics
Daytodayebay6.3K views

Recently uploaded

Webinar : Desperately Seeking Transformation - Part 2: Insights from leading... by
Webinar : Desperately Seeking Transformation - Part 2:  Insights from leading...Webinar : Desperately Seeking Transformation - Part 2:  Insights from leading...
Webinar : Desperately Seeking Transformation - Part 2: Insights from leading...The Digital Insurer
98 views52 slides
Inawisdom IDP by
Inawisdom IDPInawisdom IDP
Inawisdom IDPPhilipBasford
17 views48 slides
Qualifying SaaS, IaaS.pptx by
Qualifying SaaS, IaaS.pptxQualifying SaaS, IaaS.pptx
Qualifying SaaS, IaaS.pptxSachin Bhandari
1.1K views8 slides
This talk was not generated with ChatGPT: how AI is changing science by
This talk was not generated with ChatGPT: how AI is changing scienceThis talk was not generated with ChatGPT: how AI is changing science
This talk was not generated with ChatGPT: how AI is changing scienceElena Simperl
34 views13 slides
Zero to Cloud Hero: Crafting a Private Cloud from Scratch with XCP-ng, Xen Or... by
Zero to Cloud Hero: Crafting a Private Cloud from Scratch with XCP-ng, Xen Or...Zero to Cloud Hero: Crafting a Private Cloud from Scratch with XCP-ng, Xen Or...
Zero to Cloud Hero: Crafting a Private Cloud from Scratch with XCP-ng, Xen Or...ShapeBlue
209 views20 slides
Choosing the Right Flutter App Development Company by
Choosing the Right Flutter App Development CompanyChoosing the Right Flutter App Development Company
Choosing the Right Flutter App Development CompanyFicode Technologies
13 views9 slides

Recently uploaded(20)

Webinar : Desperately Seeking Transformation - Part 2: Insights from leading... by The Digital Insurer
Webinar : Desperately Seeking Transformation - Part 2:  Insights from leading...Webinar : Desperately Seeking Transformation - Part 2:  Insights from leading...
Webinar : Desperately Seeking Transformation - Part 2: Insights from leading...
This talk was not generated with ChatGPT: how AI is changing science by Elena Simperl
This talk was not generated with ChatGPT: how AI is changing scienceThis talk was not generated with ChatGPT: how AI is changing science
This talk was not generated with ChatGPT: how AI is changing science
Elena Simperl34 views
Zero to Cloud Hero: Crafting a Private Cloud from Scratch with XCP-ng, Xen Or... by ShapeBlue
Zero to Cloud Hero: Crafting a Private Cloud from Scratch with XCP-ng, Xen Or...Zero to Cloud Hero: Crafting a Private Cloud from Scratch with XCP-ng, Xen Or...
Zero to Cloud Hero: Crafting a Private Cloud from Scratch with XCP-ng, Xen Or...
ShapeBlue209 views
Transcript: Redefining the book supply chain: A glimpse into the future - Tec... by BookNet Canada
Transcript: Redefining the book supply chain: A glimpse into the future - Tec...Transcript: Redefining the book supply chain: A glimpse into the future - Tec...
Transcript: Redefining the book supply chain: A glimpse into the future - Tec...
BookNet Canada43 views
Enabling DPU Hardware Accelerators in XCP-ng Cloud Platform Environment - And... by ShapeBlue
Enabling DPU Hardware Accelerators in XCP-ng Cloud Platform Environment - And...Enabling DPU Hardware Accelerators in XCP-ng Cloud Platform Environment - And...
Enabling DPU Hardware Accelerators in XCP-ng Cloud Platform Environment - And...
ShapeBlue120 views
Redefining the book supply chain: A glimpse into the future - Tech Forum 2023 by BookNet Canada
Redefining the book supply chain: A glimpse into the future - Tech Forum 2023Redefining the book supply chain: A glimpse into the future - Tech Forum 2023
Redefining the book supply chain: A glimpse into the future - Tech Forum 2023
BookNet Canada46 views
Adopting Karpenter for Cost and Simplicity at Grafana Labs.pdf by MichaelOLeary82
Adopting Karpenter for Cost and Simplicity at Grafana Labs.pdfAdopting Karpenter for Cost and Simplicity at Grafana Labs.pdf
Adopting Karpenter for Cost and Simplicity at Grafana Labs.pdf
MichaelOLeary8213 views
PCCC23:日本AMD株式会社 テーマ1「AMD Instinct™ アクセラレーターの概要」 by PC Cluster Consortium
PCCC23:日本AMD株式会社 テーマ1「AMD Instinct™ アクセラレーターの概要」PCCC23:日本AMD株式会社 テーマ1「AMD Instinct™ アクセラレーターの概要」
PCCC23:日本AMD株式会社 テーマ1「AMD Instinct™ アクセラレーターの概要」
The Power of Generative AI in Accelerating No Code Adoption.pdf by Saeed Al Dhaheri
The Power of Generative AI in Accelerating No Code Adoption.pdfThe Power of Generative AI in Accelerating No Code Adoption.pdf
The Power of Generative AI in Accelerating No Code Adoption.pdf
Saeed Al Dhaheri44 views
Business Analyst Series 2023 - Week 4 Session 8 by DianaGray10
Business Analyst Series 2023 -  Week 4 Session 8Business Analyst Series 2023 -  Week 4 Session 8
Business Analyst Series 2023 - Week 4 Session 8
DianaGray10180 views
The Power of Heat Decarbonisation Plans in the Built Environment by IES VE
The Power of Heat Decarbonisation Plans in the Built EnvironmentThe Power of Heat Decarbonisation Plans in the Built Environment
The Power of Heat Decarbonisation Plans in the Built Environment
IES VE85 views
Future of AR - Facebook Presentation by Rob McCarty
Future of AR - Facebook PresentationFuture of AR - Facebook Presentation
Future of AR - Facebook Presentation
Rob McCarty66 views
Deep Tech and the Amplified Organisation: Core Concepts by Holonomics
Deep Tech and the Amplified Organisation: Core ConceptsDeep Tech and the Amplified Organisation: Core Concepts
Deep Tech and the Amplified Organisation: Core Concepts
Holonomics17 views
PCCC23:日本AMD株式会社 テーマ2「AMD EPYC™ プロセッサーを用いたAIソリューション」 by PC Cluster Consortium
PCCC23:日本AMD株式会社 テーマ2「AMD EPYC™ プロセッサーを用いたAIソリューション」PCCC23:日本AMD株式会社 テーマ2「AMD EPYC™ プロセッサーを用いたAIソリューション」
PCCC23:日本AMD株式会社 テーマ2「AMD EPYC™ プロセッサーを用いたAIソリューション」

On The Road To HTTPS Everywhere / BrightonSEO 2017