In August, Google announced HTTPS as a ranking signal. But in order to benefit from this ranking factor, you need to use a 2048-bit encryption. I have only seen websites with 128-bit and 256-bit encryption. Am I missing something?

  • 3
    Your title and body text are two completely different questions. For the question title, the answer is 'SHA-2', best explained here. For the body, there is an excellent answer over on the InfoSec SE site here. Basically, one is a master key and it is used to generate a smaller session key. Hope that helps? – Tom Brossman Nov 16 '14 at 9:11

2048 bit signatures

You seem to be mixing up the signed certification to that of the actual encryption rate. Nowadays most good SSL providers will use a NIST recommended 2048 bit signed certification, because SHA2 is becoming the norm and actually recommended encryption rate you should be looking for is 256bit minimal however SHA2 supports 224, 256, 384 or 512 bits.

|improve this answer|||||

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.