Understanding SSL Security: A Guide to Certificate Management and Settings

Understanding SSL Security: A Guide to Certificate Management and Settings

By Michael Chen

December 17, 2024 at 03:09 AM

SSL Certificates: A Comprehensive Guide

SSL certificates automatically protect all properly-configured domains pointing to Squarespace websites, securing connections and preventing unauthorized access. This security measure is included free for all domains.

Eligibility Requirements:

  • Third-party domains must be correctly connected
  • Domains must point to Squarespace websites
  • Domain names cannot exceed 63 characters
  • Applies to all subdomains and integrated domains

SSL Certificate Status Check:

  1. Open domain dashboard and verify "Issued" status
  2. Check SSL menu for "Active" status
  3. Visit your website to confirm SSL implementation

Security Settings:

Secure (Recommended)

  • Automatically redirects to HTTPS
  • Includes HTTPS links in sitemaps
  • Improves SEO through HTTPS indexing
  • Requires SSL-compatible browsers

HSTS Secure

  • Provides enhanced encryption
  • Prevents man-in-the-middle attacks
  • Eliminates "connection not private" warnings
  • Recommended when using Secure setting

Insecure

  • Allows both HTTP and HTTPS access
  • Includes HTTP links in sitemaps
  • Search engines index HTTP version
  • May be necessary for specific situations

Browser window with security lock symbol

Browser window with security lock symbol

Technical Specifications:

  • Uses Let's Encrypt DV SSL certificates
  • 90-day certificate renewal cycle
  • 2048-bit SSL encryption (except checkout)
  • TLS 1.2 for HTTPS connections
  • Automatic certificate issuance

E-Commerce Security:

  • SSL-protected checkout
  • Level 1 PCI compliance
  • 128-bit SSL encryption
  • Custom domain display in checkout URL

Benefits:

  • Enhanced visitor trust
  • Data protection
  • Improved loading speeds
  • Better SEO performance
  • Protection against hackers

Important Notes:

  • Cannot be disabled completely
  • Works with all subdomains
  • Automatic account information encryption
  • May require up to 72 hours for updates
  • Regular automatic renewal

For technical issues or certificate errors, consult the troubleshooting documentation or contact support for assistance.

Related Articles

Previous Articles