SSL for the uCoz websites The HTTPS protocol is a very important security tool for sensitive data transmission, a positive influence on search engine rankings, and very often a must for websites of public authorities and organizations.


All of the users with a paid plan on their websites now have the opportunity to install an SSL certificate and thereby activate the HTTPS protocol.

This option is available for the websites using the following
system subdomains:

*.ucoz.ru, *.ucoz.com, *.ucoz.net, *.at.ua and *.3dn.ru

Connection of an SSL certificate is available for both custom domain websites and those with the system ones. Read on to learn how to purchase and how to connect an SSL certificate.

* If you have a custom domain, you need to purchase an SSL certificate to enable HTTPS for your domain. If your website uses one of the following system domains – .ucoz.ru, .ucoz.com, .ucoz.net, or .3dn.ru – there’s no need to purchase a certificate, it’ll be connected automatically!

What Is HTTPS? Why Do Websites Need It?


HTTPS (HyperText Transfer Protocol Secure) is a protocol for secure communication over a computer network. Data transmitted over HTTPS are encrypted with the SSL or TLS protocols.


In layman's terms, it means that when you’re doing something on the internet, for example, browse a website or upload a photo to your social media page, you’re initiating data exchange between your computer and the server. Generally, HTTP is used for such exchanges. Such method is pretty comfortable and is widely used, but it has a major drawback, which is the absence of data encryption between your computer and the server. It’s not that important if you simply load a website in a browser, but it’s very critical when there’s a transfer of really sensitive and confidential information, such as a username, password, credit card number, etc. Information may go through dozens of different intermediate nodes on its way to the server. The absence of encryption may cause the data robbery if at least one of such nodes is under malicious control.

HTTPS guarantees encryption of all transferred data and secures its safety the whole way from a computer to the server. Every modern browser supports HTTPS.

HTTPS and SEO

Since HTTPS provides improved safety, it also makes a positive impact onto search engine rankings. Google, for example, takes the HTTPS protocol into consideration in their search ranking algorithms.

It’s very likely that search engines will prefer websites with HTTPS protocol over HTTP websites in the future.

More Info About HTTPS

There's a new option in the Security settings which allows to install your own SSL certificates and to enable the HTTPS protocol.

Where can I buy an SSL certificate?

You can buy an SSL certificate from any Certificate Authority.

What is the right certificate for my website?

Domain Validation Certificate will be more than enough for most of the websites. Such certificate validates only the domain and has a simplified issuing procedure.

What should I do after the purchase?

After a certificate has been issued, you need to save the private key file (with the .key extension) and the certificate files (usually with the .crt extension) provided by the chosen Certificate Authority. These are regular text files. The contents of these files must be copied and pasted into the corresponding fields in the SSL setup section.

How do I know that my website works with HTTPS?

After the successful certificate installation your website will be available at https://your_website. There will also be an image of the green lock in the address bar:

Should I enable redirection from HTTP to HTTPS?

We strongly recommend not to enable the option "Disable automatic redirection to HTTPS", because it may harm your website's SEO. You may enable it only if you need to apply changes to the code of the website for the correct HTTPS work.

What is the "Prohibit HTTP for connected links" option for?

This option will prohibit the users of your website to use image links (for example, in comments) that can't be uploaded through the HTTPS protocol.

41 comments
1 Khen wrote 20.07.2016, 12:57 PM
Though I'm excited to use this feature for SEO purposes, I fear for some reasons.

1.) If I use https on my website, what will happen to my links (outbound or inbound links) and images posted in the entries of different modules? For example, I wrote an article entry in http://www.affordablecebu.com/load....0-30377

> Will the image I've posted in that entry be broken or disappear? The image link is http://www.affordablecebu.com/picture....ill.jpg and if I use HTTPS, the image link would be https://www.affordablecebu.com/picture....ill.jpg . The image would not appear because the image url is now different. Considering I've posted thousands of images without using $IMAGE1$ code, it would be very very hard to change each image url into HTTPS url.

2.) If I use HTTPS, do I need to resubmit my website URL to every search engines? And do I need to resubmit my sitemap files?

3.) If I use HTTPS, does it affect my website speed? Will it slow down my website?

Please enlighten us.
0
2 Gromov wrote 20.07.2016, 1:53 PM
Hello Khan,

First of all thank you for your feedback!

Now the answers:
1) Our system links, which are obtained by using our codes will be changed into HTTPS automatically.
If there is a direct link to the image in the post by the HTTP URL, the image will be loaded and operational, but it will be displayed that the connection is not fully protected.

2) You don't need to send a thing. Sitemaps will be regenerated automatically. The next time you enter the website, search engines will see that you've adopted into HTTPS and will reindex pages by themselves.

3) This one is pretty short. No. Everything will be working on its regular basis.
3 Khen wrote 20.07.2016, 2:06 PM
What do you mean by this?

Quote
but it will be displayed that the connection is not fully protected.
 
Will my webpage become inaccessible? Does a browser warn the site visitor that the webpage is dangerous or harmful? How would my webpage appear to a site visitor?
-1
5 Gromov wrote 20.07.2016, 2:21 PM
It means that instead of the green lock, there will be a yellow one in the URL bar. And when you click on the yellow lock, browser will tell that the connection is not fully protected. That's it.

About the possible negative influence of the HTTPS. There is none. Search engines are very positive about it.
6 Khen wrote 21.07.2016, 8:36 AM

Quote
About the possible negative influence of the HTTPS. There is none. Search engines are very positive about it.

You might be mistaken. Because it's a new URL (HTTPS version), search engines need to reindex the whole website. External links pointing to that website will have no more influence to the new HTTPS website. It means, you need to start link-building campaign from scratch.

Stephen Kenwright (Director of Search) of Branded3.com said,


Quote
Moving your website from HTTP to HTTPS is very much like migrating your website to a new URL structure, or even moving to a brand new domain. Past experience has told us that there’s so much that can go wrong if things aren’t implemented correctly. Google has given some guidelines on moving to HTTPS here and here, and Barry Schwartz over at Search Engine Roundtable covered the topic too. ...

Finally, if you think that moving your website to HTTPS is going to fix any existing issues or is going to happen without any difficulty…think again. You are changing every single URL on your website, so you have to be very careful to get things right to avoid damaging your rankings. With regards to any existing issues or penalties, Google will eventually figure things out and pass on the existing penalty to your new URL structure....

Up to this point HTTPS has been a “lightweight” ranking signal – the boost given to sites that make the switch is all but negated by the link equity lost through 301 redirects from HTTP to HTTPS. A recent study conducted by Searchmetrics suggested that there was no advantage to switching at this point. Migrating often isn’t high on the list of priorities as a result.


I hope this will enlighten everyone else.
0
7 Gromov wrote 22.07.2016, 10:41 AM
If there are any external links(HTTP) pointing to the website(which is HTTPS now), don't worry, they'll redirect to your website in any case.
9 Khen wrote 22.07.2016, 12:27 PM
As of now, I'm not convince to switch to HTTPS as what Stephen Kenwright said,


Quote
Up to this point HTTPS has been a “lightweight” ranking signal – the boost given to sites that make the switch is all but negated by the link equity lost through 301 redirects from HTTP to HTTPS.

HTTPS is mostly recommended for brand new websites. But old HTTP websites that have external HTTP links might be affected negatively if they switch to HTTPS.
4 Khen wrote 20.07.2016, 2:13 PM
Another question:

Will using HTTPS reduce my website's link juice (SERP ranking)? Considering that my inbound links are HTTP urls. And my new url is HTTPS. Will this affect my SEO negatively?
0
8 Gromov wrote 22.07.2016, 10:43 AM
I've replied to this one in the previous comment.
0
10 Gromov wrote 17.08.2016, 7:59 AM
Sorry, but currently there's no such opportunity.
avatar
11 defaultNick6762 wrote 17.08.2016, 8:57 AM
Yesterday I made with usite.pro domain. I know usite.pro so many shortages, but I've bought a premium plan for 1 year.

Question, What can move? of usite.pro to ucoz.net or ucoz.com?
0
12 Gromov wrote 17.08.2016, 9:15 AM
You can create a new website with ucoz.com or ucoz.net, after that we'll transfer funds from your usite.pro website to a new one.

The other option is to wait for SSL/HTTPS feature to become available for usite.pro.
avatar
13 defaultNick6762 wrote 17.08.2016, 10:55 AM
Wow very helpful ..

please move all the data in jubeman.usite.pro (pubindo.com) to doyannarsis.ucoz.com.

Do Thema, user, and all articles are also be displaced?
0
14 Gromov wrote 17.08.2016, 11:13 AM
Well, it's working a little bit differently:

1. You need to create a backup of your usite.pro website.
2. Upload it, to another one you want.
3. Then cancel the plan for your usite.pro.
4. Request a transfer of the funds to the website you need.
5. Activate the necessary plan.

Actually, the process is not that complicated as it might seem. If you need any assistance, just contact our Support Team and we'll be glad to help you.
0
15 Gromov wrote 17.08.2016, 11:14 AM
Don't worry about the user's database, backup file will contain such information.
avatar
16 Amat_serkal wrote 17.08.2016, 11:30 AM
1. I've been backing up the data from the database and theme.
2. "Upload it, to another one you want". That is uploaded to ucoz.com domain? how to do to upload a file manager while Max 15 MB?
3. How do I cancel my plans to usite.pro. I plan on starting on 2016-05-03, If you already click cancel irreversibly or disappear altogether?
4. Where the demand for funds for the site I want?
5. Can provide an explanation with pictures, sometimes I'm confused. biggrin

Contact the Support Team, in return very shortly. if I could ask for help to you alone?
0
17 Gromov wrote 17.08.2016, 11:51 AM
Forward all your questions and requests to the Support Team (you can do it from the Control Panel). I'll answer to all of your questions there.
avatar
18 Amat_serkal wrote 19.08.2016, 6:10 AM
How do I upload the backup data usite.pro to UcoZ?
Max 15 MB?

0
19 Gromov wrote 19.08.2016, 11:43 AM
You're already answered by Tech Support team.
avatar
20 Amat_serkal wrote 23.08.2016, 5:13 PM
This is why?
When I restore but the entry in the catalog site, a photo in the photo album module and user everything is not back in full?



21 bigblog wrote 25.08.2016, 6:51 PM
We have replied to your ticket sent to the Technical Support.
avatar
22 Amat_serkal wrote 18.09.2016, 7:24 AM
why my site is always error after installation of SSL? Is there something wrong with my installation. but the Ialready ask the to SSL Providers are correct.

Mozila :


UcBrowser :



And Uran :
 


0
23 bigblog wrote 18.09.2016, 9:04 AM
At the moment, your site loads just fine both in Google Chrome (screenshot) and Firefox (screenshot). Are you still facing the issue?
avatar
24 Amat_serkal wrote 18.09.2016, 9:18 AM
Yeah sometimes,
Sometimes error message often appears after I install SSL. is there any problem in my SSL?

and messages in Uran: no data is received.

Does the time I install SSL, the database is still http?

My friend suggested checks its database.

And ask the hosting provider.
0
25 bigblog wrote 18.09.2016, 8:19 PM
I'm not sure what do you mean by "the database is still HTTP." The system variables like $ENTRY_URL$ will automatically use the HTTPS version of your website URL, if that's what you mean. Note that the links that point to the HTTP version of your site will only redirect to the HTTPS version if the "Disable automatic redirection to HTTPS" option is NOT enabled. You should not see any error message by now. I have checked your website once again, and it works properly. If the errors occur again, it might be a local problem.
avatar
26 Amat_serkal wrote 19.09.2016, 3:58 AM
Local issues mean that because of what?

I get an error message since the install SSL. Maybe when you look back on its under normal circumstances.

But, I'll be going again get an error message.


This meant the I tick the? Screenshoot
0
27 Sunny wrote 19.09.2016, 1:32 PM
Hello,

Could you check your website using another computer? Do you still have the problem? Do other users of the website get the error as well?
avatar
28 Amat_serkal wrote 19.09.2016, 8:59 PM
yes, i tried with a laptop. but I can not.

maybe when you open the website to run normally, but try to always check the next time there is sometimes an error message.


and this just happened. screenshoot
I recorded it to prove.
Laptop computers and use the internet differently and both went smoothly.
Video 1 - Video 2
0
29 Sunny wrote 21.09.2016, 2:27 PM
Let's continue the discussion in the forum thread.
30 chrisdvanne wrote 04.11.2016, 3:08 PM
Hi,

I have installed the https protocol to my website but when I test it at www.ssllabs.com I get a "C", mostly because the TLS version you're using is obsolete.
This is the message I get: 

Code
No support for TLS 1.2, which is the
only secure protocol version.


Do you plan to update this in the near future?
0
31 bigblog wrote 08.11.2016, 9:29 PM
Hi, Chris! We have replied to your question on the Community Forum: https://blog.ucoz.com/updates/https#comEnt46883
Please, continue the discussion there. smile
avatar
32 IMB4 wrote 15.03.2017, 8:01 PM
How to install letsencrypt.org on a uCoz website? I want to use this free tool.
0
33 Gromov wrote 16.03.2017, 11:59 AM
We recommend that you contact the support team from the Control Panel of your website. Also, if you want to know how to use the Letsencrypt service, it's better if you check this material from their website https://letsencrypt.org/getting-started/
avatar
34 IMB4 wrote 17.03.2017, 9:32 PM
But is possible to do it with uCoz?
0
35 Gromov wrote 20.03.2017, 8:24 AM
Yes, of course.
avatar
36 IMB4 wrote 21.03.2017, 0:52 AM
How *-*?
0
37 Gromov wrote 21.03.2017, 7:59 AM
First of all, you need to get a certificate for your domain, you can use this service for example: https://www.sslforfree.com/ , choose the DNS TXT record option.

Select the manual configuration mode, set the records in your domain zone, which the certificate issuer will provide to you, the domain zone is to be changed within 2 hours, after that click on the receive button and get the certificate for your domain from the issuer's end.

The received data should be: a secret key, a certificate, an intermediate certificate.

In order to receive more detailed support, please send a message into the support team from the Control Panel of your website.
avatar
38 IMB4 wrote 21.03.2017, 5:06 PM
Ok. Thanks a lot. I posted this question at "uCoz Forum" but people said was impossible. Thanks a lot for ur answer wink
0
39 Gromov wrote 22.03.2017, 1:11 PM
You're always welcome.
avatar
40 IMB4 wrote 24.03.2017, 11:54 PM
I'm using https://domain.ucoz.com/ do you know how to get the certificate? I tried all options at https://www.sslforfree.com/  but can't sad
0
41 Gromov wrote 27.03.2017, 7:01 AM
IMB4, you've been provided with the necessary information already.  For any further information it's recommended to contact the support team from the Dashboard of your website.
Your comment