So you bought an SSL certificate to secure your site. Now what?
Now that you have an SSL certificate, you have access to the secure HTTPS version of your site. The extra ‘s’ at the end of HTTPS means that the site is secured by an SSL certificate. However, the non-secure HTTP version of your site is still available for visitors to land on. Your next step after adding an SSL certificate to your domain is to decide what happens to the visitors who try to visit the non-secure version of your site.
You are given three options: block all traffic, reroute traffic to the secure version of the site, or allow visitors to access the non-secure version of the site.
|Redirect to https://domain.com||All traffic to the HTTP version of the site will be redirected to the HTTPS version of the site|
|Block access to the http:// site||All traffic will be blocked from visiting the HTTP version of the site. They will receive an error if they try.|
|Display the site normally||All traffic will be able to view the HTTP version of the site|
After you have added an SSL certificate, it will automatically be installed on your domain. There are two steps to take after this automatic installation has taken place:
Changing the Non-SSL Site Display Options on Legacy Accounts
- Log in to the ACC
- Click Domains in the left sidebar
- Click Manage Your Domain Names in the drop-down
- Click the name of the domain whose display options you want to change
- Find the Change Non-SSL Site Display Option button and click it
- Next to When accessing [domain URL], click the box and select your preferred option:
- Redirect to https://domain.com
- Block access to the http:// site
- Display the site normally
- Click the Update button
If you have any absolute links in your site’s code, they should be updated from HTTP to HTTPS. For more information about absolute links, check out our explanation of Relative and Absolute links.