Bringing HTTPS to all blogspot arena blogs

[Cross-posted from the Google Security Blog]

HTTPS is prime to net security; it protects the integrity and confidentiality of files sent between websites and company’ browsers. Final September, we started rolling out HTTPS give a boost to for blogspot arena blogs so which which you can also strive it out. As of late, we’re launching one other milestone: an HTTPS version for every blogspot arena weblog. With this change, company can accumulate entry to any blogspot arena weblog over an encrypted channel.

The HTTPS indicator in the Chrome browser

As segment of this originate, we’re placing off the HTTPS Availability environment. Even as soon as you didn’t previously switch on this environment, your blogs will contain an HTTPS version enabled.

We’re also adding a novel environment known as HTTPS Redirect that enables you to determine-in to redirect HTTP requests to HTTPS. While all blogspot blogs will contain an HTTPS version enabled, as soon as you switch on this novel environment, all company will be redirected to the HTTPS version of your weblog at https://.blogspot.com although they dash to http://.blogspot.com. Whilst you elect to turn off this environment, company will contain two alternate choices for viewing your weblog: the unencrypted version at http://.blogspot.com or the encrypted version at https://.blogspot.com.

The novel HTTPS Redirect environment in the Blogger dashboard

Please do not overlook that mixed snarl can also motive about a of your weblog’s functionality not to work in the HTTPS version. Mixed snarl is in total precipitated by incompatible templates, devices, or put up snarl. While we’re proactively fixing every body among these errors, about a of them can most productive be mounted by you, the weblog authors. To reduction problem and fix these errors, we not too prolonged prior to now launched a mixed snarl warning tool that signals you to imaginable mixed snarl elements for your posts, and affords you the technique to fix them robotically ahead of saving.

Present links and bookmarks to your blogs are usually not plagued by this originate, and can continue to work. Please current that blogs on custom domains will not be going to yet contain HTTPS give a boost to.

This replace expands Google’s HTTPS Everywhere mission to all blogspot arena blogs. We like your feedback and can use it to invent future improvements.

Posted by Milinda Perera, Device Engineer, Security