Migrate WordPress to HTTPS

Slides from my talk at WordPress Orlando Meetup on how to migrate WordPress site from HTTP to HTTPS.

As more sites transition to HTTPS and Google giving preferred ranking to secure sites, it became important to properly install a TLS/SSL Certificate. Why you should move your site to HTTPS.
The process of moving to HTTPS can be intimidating starting from obtaining certificate to migrating all content to HTTPS.
Recently, Let’s Encrypt started offering Free TSL/SSL Certificates. CloudFlare offers Free TLS/SSL with HTTP/2 protocol support. I wrote in the past about the benefits of HTTP/2 protocol.

In this presentation, we discussed how you can obtain a Free TLS/SSL Certificate, make your content HTTPS friendly, and how to migrate existing content to HTTPS.
We also went over the benefits of serving your pages over secure connection, common problems with transition, and how you can test your certificate configuration.

Direct link to the presentation

Links for the resources/articles mentioned in this presentation:

• HTTPS as a ranking signal in Google
• Upcoming change proposal in Google Chrome. This change will ensure that HTTP sites will be marked unsafe with a red X mark displayed in the address bar. The goal of this proposal is to display that HTTP provides no data security.
• Proposal experiment in Google Chrome – type chrome://flags in your browser bar. Switch from “default” to “mark non-secure origins as non-secure”.
• Really Simple SSL plugin
• What to do with Really Simple SSL if you get a redirect loop
• CloudFlare CDN
• CloudFlare SSL
• CloudFlare Flexible SSL plugin
• SSL Insecure Content Fixer plugin
• Tutorial on setting up CloudFlare Free SSL in WordPress
• Whynopadlock.com – finds mixed content on your site
• Enable HSTS – HTTP Strict Transport Security
• HSTS Preload list
• Test SSL configuration

Thanks to everyone who came out to this presentation. Please let me know if you have any questions