Set up SSL: secure HTTPS correctly

HTTPS is mandatory today. Here is how to set up SSL correctly and avoid common mistakes.

How to do it

• Choose a valid certificate from Let’s Encrypt or another CA.
• Redirect HTTP to HTTPS and avoid duplicate content.
• Enable HSTS to force secure connections.
• Test certificate chain and security with an SSL assessment.
• Use current TLS versions and disable old protocols.

HTTPS increases visitor trust and boosts ranking. Also see our explanation of DNS and domains.