3
What is Always-On SSL? A cost-effective website security measure that helps protect the entire online user experience from start to finish. It delivers authentication of the identity of the website and encrypts all information shared between the website and a user (including any cookies exchanged), protecting the data from unauthorized viewing, tampering, or use. Why do I need it? Online attacks grow evermore frequent and are easier to execute – organisations worldwide are under increasing scrutiny to ensure online transactions involving confidential data are secure. New threats such as Sidejacking and SSLStrip endanger consumer trust and compromise sensitive data. Why isn’t intermittent SSL enough? Intermittent SSL protects only certain pages, such as a website's log-in and transaction pages, leaving the rest of a user’s session unsecured and open to attack. Safe and Secure Always over HTTPS Sidejacking and SSLStrip HTTPS HTTPS HTTP Always here to help you discover the benefits of Always-On SSL The Thawte quick reference guide to Always-On SSL

ALWAYS-ON SSL - HTTPS Everywhere

Embed Size (px)

Citation preview

Page 1: ALWAYS-ON SSL - HTTPS Everywhere

What is Always-On SSL?A cost-effective website security measure that helps protect the entire online user experience from start to finish. It delivers authentication of the identity of the website and encrypts all information shared between the website and a user (including any cookies exchanged), protecting the data from unauthorized viewing, tampering, or use.

Why do I need it?Online attacks grow evermore frequent and are easier to execute – organisations worldwide are under increasing scrutiny to ensure online transactions involving confidential data are secure. New threats such as Sidejacking and SSLStrip endanger consumer trust and compromise sensitive data.

Why isn’t intermittent SSL enough?Intermittent SSL protects only certain pages, such as a website's log-in and transaction pages, leaving the rest of a user’s session unsecured and open to attack.

Safe and SecureAlways over HTTPS

Sidejacking and SSLStrip

HTTPSHTTPS

HTTP

Always here to help you discover the benefits of Always-On SSL

The Thawte quick reference guide to Always-On SSL

Page 2: ALWAYS-ON SSL - HTTPS Everywhere

What makes Always-On SSL different?

Always-On SSL delivers the same high level of SSL protection throughout your site, securing the visitor’s entire session. Visitors will feel safe with the reassuring HTTPS at the beginning of the browser address bar throughout their entire stay on your website, making it safer to search, share, and shop online.

Why does it matter to my business?

Trust is the foundation of the Internet economy. To ensure that trust, you need end-to-end security to help protect every webpage your user’s visit, not just the login pages and shopping carts. Businesses who are serious about protecting customers and their business reputations should implement Always-On SSL, with SSL certificates from a trusted Certificate Authority such as Thawte.

What’s more, Google now favours websites that implement HTTPS across their entire site, rewarding owners with an SEO ranking boost.

Additionally, many browsers now trigger security warnings when a visitor is hopping between secured and unsecured connections. Ensure visitors experience your website as you intended with Always-On SSL.

3 tips for moving to Always-On SSL

1 The Certificate Authority that you purchase your SSL certificates from will offer guidance on proper implementation.

2 You may need to purchase additional certificates if different parts of your site run on different servers and you also need to make sure you have implemented Always-On SSL properly, so that there are no unencrypted gaps in your site and so that you don’t damage your search engine ranking and website performance.

3 When you switch to Always-On SSL, you are effectively moving your site to HTTPS, which is similar to moving to a new domain. Be sure to redirect all sites and pages to their new HTTPS counterparts. You also need to list the HTTPS site separately in Google Webmaster tools.

Page 3: ALWAYS-ON SSL - HTTPS Everywhere

What type of SSL certificate should I use?To reassure customers of your website’s value and security, use an Extended Validation (EV) SSL certificate from Thawte. The green address bar gives the ultimate visitor reassurance that it is safe to proceed on your website.

Conclusion• Intermittent use of SSL encryption is no longer sufficient to protect your website visitors or safeguard against data compromise.• Implementing Always-On SSL on your website secures the user and data on every page – from start to finish.• Always-On SSL is easy to implement and requires no extra hardware.• Boost your Google SEO ranking with Always-On SSL, a boost likely to increase in the future.• Strengthen your brand and reputation by showcasing your commitment to online security.• Increased user trust leads to lower bounce rates and shopping cart abandonments. The benefits; increasing online transactions and conversion rates.• Use Thawte Extended Validation (EV) SSL for the highest visible display of online trust.

To learn more about Thawte and how your business can benefit from Always-On SSL,contact your Security Advisor today:

Via phoneUS toll-free: +1 888 484 2983UK: +44 203 450 5486South Africa: +27 21 819 2800Germany: +49 69 3807 89081France: +33 1 57 32 42 68

Email: [email protected]

Visit our website at https://www.thawte.com/ssl