Member Avatar for InsightsDigital

The reason on why I am mentioning this topic is because I have noticed that many links that are listed by users here have security warnings. Despite the warnings, a study published by Carnegie Mellon mentioned that the majority of visitors ignore those warnings. So if your business site have those warnings, do you quickly pay heed?

  • 4 Contributors
  • 6 Replies
  • 91 Views
  • 1 Week Discussion Span
  • Latest Post Latest Post by MktgRob

Dani AI

Generated

This topic shows why browser warnings should be handled as operational incidents, not cosmetic issues. raised the user-behavior angle, called out search/brand exposure, reminded everyone about long-term link/trust effects, and shared a concrete broken-checkout example. The practical takeaway: warnings erode conversions and can compound into SEO and support headaches, so treat them as priority fixes with monitoring and runbooks.

A concise checklist to apply immediately:

  • Diagnose the exact browser message (expired cert, name mismatch, self-signed, mixed content, HSTS/misconfiguration) before changing anything.
  • Certificates: renew well before expiry; use ACME automation (LetsEncrypt or an automated commercial CA process); install the full intermediate chain and ensure the cert covers all hostnames (SAN/wildcard).
  • TLS/config: support modern TLS (1.2/1.3), disable weak ciphers, enable forward secrecy, and keep server time correct.
  • Mixed content: fix hard-coded http resources (images, scripts, iframes) so pages load fully over HTTPS.
  • Third-party services: monitor vendor certs and have a tested fallback for payments or critical widgets; avoid single points of failure.
  • Verification and recovery: run an SSL test (e.g., Qualys SSL Labs), check browser dev tools for mixed-content errors, and use Google Search Console / security diagnostic tools to clear flagged pages and request reviews.
  • Operationalize: add certificate-expiry alerts, periodic scans, and an incident runbook so fixes roll out quickly.

Start with automated renewals and monitoring; that single change prevents most emergency migrations like the one described.

Recommended Answers

All 6 Replies

Member Avatar for MktgRob

The reason on why I am mentioning this topic is because I have noticed that many links that are listed by users here have security warnings. Despite the warnings, a study published by Carnegie Mellon mentioned that the majority of visitors ignore those warnings. So if your business site have those warnings, do you quickly pay heed?

I would definitely pay heed and I would say that companies who ignore these warning on their site are asking for trouble. If this turns into a major issue I could easily envision Google taking action against sites that do nothing to clear up the warnings.

Member Avatar for crimgirl

definitely
the whole thing are in a long run
ans i don't want any of my links are missed
so that the circle is incomplete

Member Avatar for InsightsDigital

I wonder from a SEO perspective, if these security warnings (since they are not keyword or SEO related) affects PageRank. I just know that personally, if I see a site that Firefox gives me a warning, I will immediately close off that site, regardless of what it is.

Member Avatar for MktgRob

I wonder from a SEO perspective, if these security warnings (since they are not keyword or SEO related) affects PageRank. I just know that personally, if I see a site that Firefox gives me a warning, I will immediately close off that site, regardless of what it is.

Based on the everchanging algorithm that is the Google Dance, I would say that if it doesn't affect PageRank yet it will suddenly pop-up and throw a whole bunch of companies, webmasters, and SEOers into hysterics.

Member Avatar for schizoman

Personally, I ignore the warnings. But then, I run linux and don't worry too much about infections. At work, we've been using a third-party checkout company for years. Just this summer, their certificate expired and, after numerous attempts to contact the company, we've concluded that the site is no longer maintained. It works, but they're not renewing their certificate.

I'm scrambling to switch all of our forms (a few hundred of them) over to use the syntax of a new, active, checkout company. I know that the encryption at the old site still works, but customers aren't going to know that. Phone calls bear me out.

I have no doubts that security warnings deter a significant number of potential users.

Member Avatar for MktgRob

Personally, I ignore the warnings. But then, I run linux and don't worry too much about infections. At work, we've been using a third-party checkout company for years. Just this summer, their certificate expired and, after numerous attempts to contact the company, we've concluded that the site is no longer maintained. It works, but they're not renewing their certificate.

I'm scrambling to switch all of our forms (a few hundred of them) over to use the syntax of a new, active, checkout company. I know that the encryption at the old site still works, but customers aren't going to know that. Phone calls bear me out.

I have no doubts that security warnings deter a significant number of potential users.

Glad to hear you are having success in avoiding these issues. Watch out with Linux because eventually the hackers and the virus idiots will come gunning for the Linux world. It is inevitable, especially as linux use keeps growing.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.