How to add an SSL certificate to your website
First to the point
The SSl security certificates in WaoPress are created and renewed automatically, once you point and resolve the DNS records, it should run automatically, to verify it:
- Go to the administration panel of the server in question
- select the SSL/TLS option in the Security section
- Once inside click on “Activate free SSL”.
- The system will confirm the request indicating that you must wait 30 minutes for it to replicate to the load balancers.
- Optionally, we recommend you to activate the option “force HTTPS enabled”, so any url written in HTTP will be changed at the server level, we leave you a video of the options mentioned:
Can I point an A record to my server and get the free SSL certificate?
No. In order to apply the free SSL certificates, your website(s) must use the WaoPress nameservers.
This is because SSL certificates are installed locally on the WaoPress platform.
Why is it important to add SSL to your website?
SSL stands for “Secure Sockets Layer”. It is a software solution that encrypts the data passing between your website and your visitors, making it difficult for hackers to get information from your website. WordPress, our favorite and the most popular content management system (CMS) on the Internet, currently supports two common types of connections: https:// and http://. The former encrypts your website’s HTTP traffic and the latter does not.
Although SSL certificates are nothing new and are nowadays free of charge, you will still find many websites using HTTP, the reason for this is that many people do not know what a secure connection really means. Many people do not understand why a webmailing under SSL is more secure than a normal HTTP connection. They think they are just as secure with the normal http: connection, but they are not.
The encryption algorithm used in an https connection: allows data transfer only if both the server and the client use strong encryption algorithms to protect sensitive information. This means that even if you use the same name as on your server, such as “wordpress-site.com” or “blog-site-msnbc-com”, you would not be able to tell anything about what happens on those different websites because each website has its own unique encryption algorithm configured (usually SHA 256).
The first step in securing your website is to install an SSL certificate. This may seem like a no-brainer, but there are a few reasons why you should do it: if you are using this site to sell your products, having a secure connection to the site will eliminate potential security threats that could happen when using payments. The second reason is that when Google updated its algorithm, it penalizes websites that have not installed an SSL certificate.