New security warnings to deter customers from buying online

Jim Stewart, CEO of digital marketing agency StewArt Media, has cautioned Australian businesses that Google’s new security warnings could cause conversions to drop and online retailers to lose sales, starting October 2017.

As part of their long-term plan to improve cyber security, Google has announced that Chrome will display “Not Secure” warnings on all HTTP pages featuring text input fields, such as login pages.

This will affect a lot of Australian businesses, especially those selling online.

“If you’re a retailer, you better act on it,” Stewart warned.

He explained that, “If you have a site that is transacting in any way and customers start seeing ‘Not Secure,’ not only in your browser but in your forms, they are not going to hang about, they are going to run a million miles. That’s going to drop your conversions through the floor.”

“Many major Australian retailers such as David Jones, Harvey Norman, and Vodafone; publishers like Sydney Morning Herald, Fairfax, Herald Sun; and government bodies such as the High Court of Australia and the Defence Department have been affected. They are all insecure, and they’re all going to get hit by this update,” Stewart said.

To resolve this issue, all pages collecting data from users will need to be migrated from HTTP to HTTPS. This can be a very challenging process, especially for companies with large websites.

“If you have a massive site, this is going to be a huge undertaking for your organisation. It’s quite complex, there’s a lot to do, and there are little things that can trip you up along the way,” says the digital marketing expert.

When deciding whether to make the change to HTTPS, Stewart recommends considering the following:

• Don’t do it for the ranking boost. In 2014 Google promised a ranking boost to all websites updating to HTTPS. However, the boost is marginal.

• Be ready for your site to slow. Using HTTPS slows down your website somewhat, (about 100 to 200 milliseconds.) This is due to the time it takes to look up the certificate.

• Redirect everything. Make sure all the HTTP individual pages are redirected to their equivalent on the HTTPS site and all your other assets, (JavaScript, CSS and images,) are also at HTTPS. Don’t forget your 404 pages.

• Check, and check again. Do a crawl after you’ve gone live with HTTPS to make sure you don’t have any HTTP URL’s left in the site and make sure that HTTP does actually redirect.

• Be prepared for a lot of turmoil. Changing all URLs is going to take a lot of time and small mistakes can stall your online business.

• Don’t duplicate your site. Some hosting companies just switch HTTPS on, while leaving the HTTP as is. This duplicates your site, which will confuse your customers.

StewArt Media is one of Australia’s leading digital marketing companies specialising in SEO, paid advertising, conversion and content optimisation. stewartmedia.com.au