What is SSL?
Secure Sockets Layer
TL;DR
SSL is the technology that creates secure, encrypted connections between websites and browsers, shown by the padlock icon and "https" in your address bar.
Example
How to spot SSL:
- URL starts with "https://" (not "http://")
- Padlock icon in browser address bar
- Click padlock to see certificate details
Without SSL: Data travels in plain text. Hackers can intercept: passwords, credit cards, personal info.
With SSL: Data is encrypted. Even if intercepted, it's unreadable scrambled data.
Why browsers care:
| Without SSL | With SSL |
|---|---|
| "Not Secure" warning | Padlock icon |
| Google ranks lower | Google ranks higher |
| Visitors leave | Visitors trust |
| Can't process payments | Secure checkout |
Explanation
How SSL Works (Simplified)
- Browser connects to website
- Website sends its SSL certificate
- Browser verifies certificate is valid
- Browser and server agree on encryption method
- All data is now encrypted
This happens in milliseconds, invisible to users.
SSL Certificate Types
Domain Validation (DV): Verifies you control the domain. Quick to get, good for most sites.
Organization Validation (OV): Verifies your organization exists. Shows company name in certificate.
Extended Validation (EV): Thorough verification process. Previously showed green bar (now just padlock).
Getting SSL
Most hosting providers include free SSL. Let's Encrypt provides free certificates. Paid certificates range from ~200 to thousands of kr/year.
Why It Matters
For Business Owners
SSL is required, not optional. Browsers actively warn users about non-SSL sites. Visitors will leave.
SSL affects SEO. Google uses HTTPS as a ranking factor. Non-SSL sites rank lower.
SSL enables features. Modern browser features (geolocation, camera access, service workers) require HTTPS.
SSL builds trust. The padlock signals security. Especially important for e-commerce and sites collecting personal data.
Common SSL Issues
- Mixed content: Page is HTTPS but loads HTTP resources
- Expired certificate: Certificates expire (usually yearly)
- Wrong domain: Certificate doesn't match the URL
- Self-signed: Not trusted by browsers
Most issues are caught and fixed by your hosting provider or developer.
Need help with your digital project?
We build websites, apps, and digital solutions for businesses.
Get in touch