The Top 5 Reasons to Enable SSL on Your Website

Thu Apr 5, 2018

Image of the earth with a safe on it - depicting a secure world.

Reason #1: It is more secure.

The Internet is a community of websites, it's only as strong as it's weakest link when it comes to security. The bottom line is that websites with no SSL protection are simply more hackable than those websites that have SSL enabled. The un-protected website passes data "in the clear" as security people like to say, and while data and content are "in the clear" anyone with intent can modify it.  You could change the victim in a news story into the assailant.  You could redact a prominent story.  Intercept a form's data and use it to start an identity theft process.   Using SSL just makes good business sense from an information security point of view.

Reason #2: End user trust.

I am appealing to the Marketer with this one.  I have had more than one Marketing Manger complain that the cost of an SSL Certificate shouldn't come out of their budget.  My argument to the protesting Marketer is almost always centered around end user trust.

End user's of the Internet have been trained over the last 20 years that when they see that locked safe in the corner of their browser, that the website they are interacting with is secure and can be trusted.  Enabling SSL on your website is a very simple way to capitalize on that ingrained trust behavior and immediately garner trust for your brand.  

Think: "This is a website that I can trust. I'm not going to get one of those viruses that I embarrassingly have to call my sister's son-in-law's step-son to fix. My god that last thing was just plain awful, I don't know if he is still speaking to me..." 

Reason #3: It's not hard to do.

I have seen entire teams melt down under the term "SSL" - they panic - it sounds HUGE - they don't get how it works - it's scary - they have to have it - "OMG run away!!!!" - technical people and marketing people alike. 

The reality is that adding SSL to your website is pretty easy to do. 

For Percussion Cloud customers, you create a support ticket and say "I want to SSL protect /enable  X website.", then we register a certificate, your domain administrator approves,  and we install the certificate, and then your website is SSL protected. 

For non cloud customers, it depends on your web server and your registrar for your internet domain.  Nearly all registrars have a process defined for requesting and approving SSL certificates.  All web server's have a process defined for installing SSL certificates. The technical folks simply need to follow the process defined by your registrar/web server to enable SSL. 

Reason #4: The web browsers will make you look bad.

As of January 2017 the Google Chrome and Mozilla Firefox web browsers have been telling your HTTP users, those that are using your website that are not using HTTPS/SSL, that your website is insecure.  They are deliberately eroding the trust that was built up in Reason #2. SSL protect your website to protect that user trust!

Reason #5: Force your integrated services to be more secure.

Many websites link in 3rd party scripts, tools, marketing automation services, analytics services, etc. When you SSL protect your website, you may get security warnings related to these services.  It could be a Font, could be a Script; What these warnings tell you is that you were linked insecurely to the remote services.  Forcing your integrated services to be more secure, makes your website more secure, and helps to build a safer, smarter internet. Most importantly, forcing SSL on your vendors protects your end users, and they are all that matter, right?

Nate Chadwick
Nate Chadwick
Vice President of Products & Services | Percussion Software