Elements that can prevent SSL from working
When you enable SSL, all the URLs of your website change from http to https.
While emyspot automatically handles all the redirections of the pages created on your website, you also need to check elements that come from external sites (images, videos, widgets you added yourself...) as well as images embedded directly in the source code from the visual editor.
Indeed, a single external resource still using an http address could "break" the security of the page. A warning message would then appear in the browser's address bar indicating a security problem on the page.
To find the problem elements easily, click this warning message and then More information > Media. You will quickly see which media have an address that does not start with https.
Which changes should you make?
Before enabling https
After checking that every resource on a page will be reachable over https once it is enabled, you can edit the URL of those resources by removing the http: protocol offered by default.
For example, for a resource available before https at the URL:
http://www.example-shop.com/medias/images/testimonial.jpg
you can remove the http: and keep only:
//www.example-shop.com/medias/images/testimonial.jpg
That way, when the page is displayed, the browser will load the resource with the protocol in use at the time the page is requested.
After enabling https
You must edit each insecure element, replacing http with https. There are two ways to do this once you are logged in to your manager:
- edit the URL manually from the visual editor (by double-clicking the element or right-clicking the image properties)
- delete the element and insert it into the page again (the image or video will then be hosted in your storage space and an https URL will be assigned to it automatically)