4

Google has let it be known that they want websites to move to SSL, and they will start making it more and more clear that HTTP sites are 'insecure'. But then using their PageSpeed tool, they will mark you down if your site does not have compression enabled.

The problem is that it does not seem to be possible to enable SSL and compression at the same time thanks to the BREACH vulnerability.

In terms of Google and SEO, is it more important to have SSL, or compression? Or should I not worry about BREACH and go ahead and enable SSL And compression?

Improve this question
1

1 Answer 1

Reset to default
2

Google is pushing SSL for a reason that web experience should be safe.

A vast number of websites already moved to HTTPS.

With regards breach vulnerability or general issue of any kind, i am sure Google is well aware and they update using webmasters blog.

With regards to compression, if your website process highly sensitive data then you may take required action, more info here:

https://security.stackexchange.com/questions/20216/should-i-disable-ssl-compression-because-of-crime

If the website is general then it shouldn't matter.

Also, note that Google is pushing with a ranking factor, so it's good to have it.

Improve this answer
1
  • "i am sure Google is well aware and they update using webmasters blog" - Has Google published anything on this specific issue (HTTPS + compression)?
    – vegemite4me
    Jun 8, 2017 at 8:21

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.