You get an SSL. You get an SSL. Google is feeling Oprah-ish with it finally hitting the proverbial switch on enabling HTTPS for its Blogspot services. That means Google’s official blogs can now be accessed over an encrypted HTTPS connection.
In case the message wasn’t clear, Google wants your site to have an SSL certificate. The switch started back in September with the ‘HTTPS Availability’ option for Blogspot owners, but it has been replaced with the ‘HTTPS Redirect’ setting. Owners can select the option and Google will handle the rest.
The catch is the HTTPS connection remains optional. Owners of Blogspot accounts will need to turn it on themselves. Why isn’t it forced? Mixed content warnings. Depending on the browser you use, it can cause a myriad of issues. Mostly, you’ll notice the padlock in your URL bar disappears.
Google wants you to fix those issues by diving into the embeds on your blog. Most mixed content warnings are due to images, videos or other code being served from external servers that lack HTTPS support. Yes, I’m looking at you Amazon native advertising widgets.
“Mixed content is often caused by incompatible templates, gadgets, or post content,” Google software security engineer Milinda Perera said in a blog post Tuesday. “While we’re proactively fixing most of these errors, some of them can only be fixed by you, the blog authors.”
The company is making life easier for Blogger, um, bloggers. A new tool is being released to warn users of mixed content warnings. Quit hotlinking images from other sites. Outside of a random ad network or hotlinking content from other sites, the number of mixed content warnings should be relatively small.
Google’s move to HTTPS support follows in the wake of Automattic partnering with Let’s Encrypt partnership. WordPress.com and custom domains with the Automattic’s service automatically have HTTPS support enabled.
Let’s Encrypt automates the process by providing free SSL/TLS certificates, the deployment and renewal. Other services such as KeyCDN have started to partner with the same service to offer HTTPS support for heavily trafficked sites that want to provide complete end-to-end HTTPS support.
What’s it mean for the average web user? The green padlocks you’re used to seeing on e-commerce sites are coming to your favorite blogs.