Security concern of website owner

Steal information and malicious software instalation are big problem to maintain thesecurity of site.

 HTTP versus HTTPS

Followings are recommended three main benefits to using HTTPS instead of HTTP
from Google support Support from Google giant .

  1. It helps check that visitors open the correct website and aren’t being redirected to a malicious site. 
  2. It helps to detect if an attacker tries to change any data sent from Blogger to the visitor.
  3.  It adds security measures that make it harder for other people to listen to visitors’ conversations, track their activities, or steal their information.

Enable HTTPS redirect, visitors always reach the encrypted version of blog at https://.blogspot.com.

To enable HTTPS redirect:

  1. Sign in to Blogger. 
  2. Select the blog to update. 
  3. On the left menu, 
  4. click Settings > Basic > HTTPS. In "HTTPS Redirect," 
select Yes.

What is HTTPS and how does it work? Google giant says following

HTTPS (Hypertext Transfer Protocol Secure) is an internet communication protocol that protects the integrity and confidentiality of users' data between the user's computer and the site.
 When a user enters data into a form onto a site in order to subscribe to updates or purchase a product, 
HTTPS protects that user's personal information between the user and the site. Users expect a secure online experience when providing data via a website. Google encourages to adopt HTTPS in order to protect users' connection to a website.
Data sent using HTTPS is secured via Transport Layer Security protocol (TLS), which provides three key layers of protection:
  1. Encryption—encrypting the exchanged data to keep it secure from eavesdroppers. That means that while the user is browsing a website, nobody can "listen" to their conversations, track their activities across multiple pages, or steal their information.
  2. Data integrity—data cannot be modified or corrupted during transfer, intentionally or otherwise, without being detected.
  3. Authentication—proves that your users communicate with the intended website. It protects against man-in-the-middle attacks and builds user trust, which translates into other business benefits.