Which SSL Reviews


Google enables HTTPS support for blogspot blogs

May 17, 2016 | By Editor 

Google has now enabled encrypted HTTPS support to all blogspot blogs…

Google has, over the last few years, brought HTTPS support to many of its products- Gmail, Google Drive, Google Docs etc. Since December last, Google has also started indexing HTTPS pages before HTTP ones. Now it brings HTTPS support to its immensely popular blogging platform blogpost too.

Earlier, in September last, Google had started offering Blogger users the option to switch their blogspot sites to HTTPS. Now things have been taken a step forward; every blogspot domain blog will have an HTTPS version. Thus, the ‘HTTPS Availability’ setting would no longer be there. Instead, there would the ‘HTTPS Redirect’ option, which will redirect visitors to the HTTPS version of the blog. Google Software Security Engineer Milinda Perera explains this in a blog post-

“With this change, visitors can access any blogspot domain blog over an encrypted channel. As part of this launch, we’re removing the HTTPS Availability setting. Even if you did not previously turn on this setting, your blogs will have an HTTPS version enabled. We’re also adding a new setting called HTTPS Redirect that allows you to opt-in to redirect HTTP requests to HTTPS. While all blogspot blogs will have an HTTPS version enabled, if you turn on this new setting, all visitors will be redirected to the HTTPS version of your blog at https://<your-blog>.blogspot.com even if they go to http://<your-blog>.blogspot.com. If you choose to turn off this setting, visitors will have two options for viewing your blog: the unencrypted version at http://<your-blog>.blogspot.com or the encrypted version at https://<your-blog>.blogspot.com.”

Those who are aware of website security aspects know what HTTPS means. For websites that are secured with SSL or TLS, the URLs or the website address would be starting with https:// instead of http://. There would also be a lock icon in the address bar, clicking on which would provide details relating to the SSL Certificate and the website.

Well, as regards google enabling HTTPS support for all blogspot blogs, there are some minor issues. It’s learnt that some blogspot blogs, on opening in the HTTPS version, might trigger mixed content alerts in the users’ browsers. (Mixed content refers to a page where a mix of initial HTML content loaded over a secure HTTPS connection and other resources- images, videos, scripts etc- are being loaded to display the same page. Warnings appear on modern browsers regarding such mixed content, saying that the page contains insecure resources). As for the mixed content related issue pertaining to the HTTPS enabling in Blogger, Milinda Perera explains in her blog post- “Please be aware that mixed content may cause some of your blog’s functionality not to work in the HTTPS version. Mixed content is often caused by incompatible templates, gadgets, or post content. While we’re proactively fixing most of these errors, some of them can only be fixed by you, the blog authors. To help spot and fix these errors, we recently released a mixed content warning tool that alerts you to possible mixed content issues in your posts, and gives you the option to fix them automatically before saving.”

Anyway, it’s to be noted that blogspot blogs on custom domains (which blogger allows to users) will not be covered by this HTTPS support move.

Be part of an IT community with thousands of subscribers. Get the latest news, blogs, and thought leadership articles. Subscribe now
Email *

Posted in HTTPS

Be Sociable, Share!

Leave a Comment


* fields are mandatory