Do your login forms load over https? New warning in Firefox

[andygambles]

Firefox will soon start marking sites like UKBF as positively insecure because they contain a login form that posts to standard http.

Chrome now also marks https sites that post to http as standard http. Chrome may actually start to follow Firefox in highlighting where a form is positively insecure.

If you have any page on your website with a form field "password" and the page is not https then the browser warning will be shown.

Full article: https://blog.servertastic.com/browsers-highlighting-insecure-login-forms

 

[Paul Kelly ICHYB]

Is it best to serve all pages https?

I thought google preferred this?

 

[andygambles]

Is it best to serve all pages https?

I thought google preferred this?

My personal view is yes. The additional ranking you get from https is minuscule and you can achieve much better SEO boosts from doing other things. However going 100% https can boost conversions anyway.

 

[Bradley Holmes]

If you already have a SSL certificate I would use it for all pages. I never really saw the point of having the checkout page secured but not showing customers the HTTPS on the home page.

I think it would be better to make a good impression right from the start.

 

[ecenica]

Is it best to serve all pages https?

I thought google preferred this?

Yes you're correct! Google say this use HTTPS/SSL as a ranking signal.

In practice there's some scepticism in the SEO community as to the real world benefits of SSL in terms of SEO at least.

Agree with comments re going full SSL as it boosts confidence. As long as your web server is configured correctly you shouldn't see any notable performance hit.

Showing my age now I remember studying cryptography way back in '97 long before SSLs went mainstream...