Search code examples
sslencryptionwebssl-certificateservermanager

Why websites don't always use SSL


SSL is very important to protecting users private data on your website.

The more I see SSL used on websites; I have noticed that it is not used all the time like Facebook, Ebay, Google (Youtube) etc...

So my question is: Why pay for a SSL and have the ability to encrypt data while it travels over insecure networks (Internet mainly) then not use it on the whole site?. Why only encrypt parts of sites? Why not just force SSL on page load?

It does occur to me that it must be a good reason as it does not slow done the page by having one.

I was thinking of getting a SSL for my website so people can contact me without other people being able to see what they are sending (in case sensitive information really). So should I encrypt the whole site or just that one page.

Thankyou for any help / thoughts on this matter.

Have a good day :)


Solution

  • Why pay for a SSL and have the ability to encrypt data while it travels over insecure networks (Internet mainly) then not use it on the whole site?

    In theory a webpage over SSL is slower, so some people avoided putting the whole site under SSL.

    Should I encrypt the whole site or just that one page.

    The whole site would be easier, and I doubt your site would have any problems with performance based on SSL.