Support

 Hi - as you are probably aware, Google is pushing for all traffic to go SSL. With cheap/free certs it's now easy to implement. Is there a best practice you support with admin tools to have every connection that comes to the site go HTTPS?

I know that .htaccess redirects are the recommended way by Google - but since Akeeba Admin Tools edits that file, I'd rather not muck with it.

I see there is an HSTS on/off dropdown - is that the preferred route or something using 301?

In the end, I want to be sure the search engines index my site with HTTPS links and everyone who comes goes via HTTPS to comply with the new world order.

Thanks in advance for some suggestions!

Please go to the Joomla! Global Configuration screen, on the Sever tab and set "Force SSL" to Entire site.

Next, you can set the HSTS in .htaccess Maker to Yes and regenerate your .htaccess file.

That it!

Thank you Dale! I was so focused on .htaccess and Akeeba I forgot about the main Joomla setting.

Can you recommend a good article on the implication of HSTS? If you don't have anything on hand, no worries, I'll research it myself.

A very Happy Christmas to you!

Nicholas suggested: https://www.maxcdn.com/one/visual-glossary/hsts/ and he also said the Wikipedia article was pretty good.

Merry Christmas to you!

This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.