Full Site SSL - Now A Google Ranking Factor. - How To?

cgchris99 wrote:So what has more weight, the fact that your site is slower because of the SSL or the added security from SSL. Enabling SSL on your whole site will slow it down.

RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [R=301,L]
RewriteCond %{HTTP_HOST} !^www.
RewriteRule ^(.*)$ https://www.%{HTTP_HOST}/$1 [R=301,L]

• all access to the OC installation with all configured multi-store domains has to be SSL encrypted
• in case the "www" is missing (e.g. http://example.tld or https://example.tld) it should be rewritten to https://www.example.tld
• in case a sub-domain (other than "www") is used it should not get the "www" added of course but only taken care of that it's using "https" (e.g. from http://sub.example.tld to https://sub.example.tld)

cwswebdesign wrote:

cgchris99 wrote:So what has more weight, the fact that your site is slower because of the SSL or the added security from SSL. Enabling SSL on your whole site will slow it down.

I agree and I'm holding off to see what others report back. You can still get great results without full SSL and this is only a small % of the rating factors.

DL

Dhaupin wrote: 5 multistores running SSL....

Cue4cheap wrote: Could you let us know what type of SSL certificate you have? I have a single SSL that account for store1.com but using multi-store store2.com would need a different SSL certificate and store3.com, etc.

Dhaupin wrote:

Cue4cheap wrote: Could you let us know what type of SSL certificate you have? I have a single SSL that account for store1.com but using multi-store store2.com would need a different SSL certificate and store3.com, etc.

Yes you need a cert for each domain, unless you spend more on wildcard SSL. We just use standard GlobalSign DV certs since they are dirt cheap through our host (less than $50/yr). Really all you need is a 2048 bit cert from anywhere, it doesnt matter. Make sure you register on the domain with WWW even if it doesnt need it. Here is ours: https://www.globalsign.com/ssl/domain-ssl/

-- Keep in mind each subdomain is considered a seperate site, so if you want an SSL blog or something without spending more on certs/wildcard/enterprise, put it under the domain like http://www.yoursite.com/blog

-- Although organization certs (OV) are technically better, there isnt much besides marketing. And unless you are in need of wildcard or multi-domain certs, dont spend the money on enterprise level.

-- Oh and also, you can run multiple certs on 1 IP in 1 server on as many addon domains as you like by using SNI support. True ancient browsers dont understand it but honestly who cares. We are all tired of catering to whiners who never run updates


You can run it through qualys once its set up to make sure your server is running SSL ok: https://www.ssllabs.com/ssltest/index.html

victorj wrote:Blady expensive, i pay € 9 a year about $ 13 same certificate.

RewriteCond %{HTTP_HOST} ^myaddondomain\.mydomain\.com$ [OR]
RewriteCond %{HTTP_HOST} ^www\.myaddondomain\.mydomain\.com$ [OR]
RewriteCond %{HTTP_HOST} ^myaddondomain\.com$
RewriteRule ^(.*)$ "http\:\/\/www\.myaddondomain\.com\/$1" [R=301,L]

RewriteCond %{HTTPS_HOST} ^myaddondomain\.mydomain\.com$ [OR]
RewriteCond %{HTTPS_HOST} ^www\.myaddondomain\.mydomain\.com$ [OR]
RewriteCond %{HTTPS_HOST} ^myaddondomain\.com$
RewriteRule ^(.*)$ "https\:\/\/www\.myaddondomain\.com\/$1" [R=301,L]

Cue4cheap wrote: I think the key is that everything (main and sub domains) are pointed to the same folder.

When i access this app -> define a path to the correct folder -> relative to the current URL accessing it.