Friends, Google Blogger has officially launched an HTTPS feature for Custom Domains. You can read complete details in the article – HOW TO ENABLE HTTPS ON A BLOGGER BLOG HAVING A CUSTOM DOMAIN?
You may use the latter part of this article to fix the Mixed Content Issue on your Blogger blog.
BELOW METHOD IS NOT REQUIRED ANYMORE :)
Folks, today I am going to explain the most important thing about your blog. A few of you asked me how I can use Free SSL Certificate (HTTPS) on blogger if using a custom domain.
I am going to show you step by process of implementing HTTPS on blogger with a custom domain. Also, this article covers the use of the content delivery network (CDN) to make your blog fast.
Google recommend HTTPS and consider it as a ranking signal. Which means you can get higher ranking in the search engine if using HTTPS instead of HTTP.
Don’t worry, now SSL is absolutely free for blogs.
Google Blogger is giving an opportunity to use free SSL certificate HTTPS for Blogspot subdomain. But what about those who are using a custom domain. Is there a way to use Free SSL Certificate i.e. HTTPS on such blogs?
Who know when Google is going to launch this feature for your blog. I am here to help you in this case. Read this article carefully which tells about implementing free SSL Certificate (HTTPS) on your Blog if using a custom domain.
Nothing is complicated. Just follow the simple steps given hereunder.
Advantages of Using SSL Certificate on blogs
Before starting implementation steps, you must know a few advantages of using a free SSL certificate (HTTPS) on a blog.
1. Your blog will be marked as secured in eyes of search engines.
2. SSL certificate enables a secure connection between visitors and blog.
3. Free SSL Certificate from Cloudflare guarantees faster blog because of CDN.
4. SSL Certificate aka HTTPS is a ranking signal now.
5. The blog looks more professional.
A few Disadvantages –
1. You’ve to re-submit sitemap to Google Search Console. Google will index your pages but start from scratch.
2. After successful implementation of HTTPS don’t rollback if you do then Google will deindex your blog.
Steps to Use free SSL Certificate on A Blogger Blog if Using A Custom Domain.
Cloudflare CDN makes your blog fast and free SSL certificate gives improved SERP.
1. Add Blog on Cloudflare
1a. Create a free Cloudflare account, add your blog and Scan DNS Records
1b. The scan takes a few minutes and after that, you see the two Cloudflare name servers. You need to add these name servers to your blog domain.
1b.1. Open your domain registrar dashboard and move to domain setting. Which may be different for different registrars.
1b.2. There you get the Option to change Name Servers. Click on that and replace old nameservers with the new.
1b.3. Performed changes may reflect after 24 hrs or more but your blog will run smoothly.
2. Enable Free SSL Certificate (HTTPS)
2a. Go to Crypto Tab (Click the lock icon)
2b. Set SSL to Flexible
2c. Set Always use HTTPS to On
2d. Set Automatic HTTPS Rewrite On
Congrats! All done. But it may take a few hours to authorize certificate. So keep patient and pause the Cloudflare meanwhile.
3. Redirect Homepage, Posts, and Pages to HTTPS
3a. Go to Page Rules tab (Click the funnel icon)
3b. add the following page rules your blog URL (change anandbakshi.com with your custom domain)
4. Cloudflare Security Level
Once you are done with above 3 page rules. Now set the security level
4a. Go to Firewall tab (Click the shield icon)
4b. Set security level Low
Now you can leave you Cloudflare account.
5. Force homepage to HTTPS
To do this you’ve to add the custom javascript in your theme under <head>
5a. Open blog’s theme HTML Editor
5b. Look for <head>
5c. Copy & paste the javascript below <head>
<script async='' type="text/javascript"> if(window.location.protocol != 'https:') { location.href = location.href.replace("http://", "https://"); } </script>
5d. Using default or custom themes. Must check the following code.
<form expr:action='data:blog.searchUrl'>
If the code is within your blog theme then replace it with
<form expr:action='data:blog.searchUrl.https'>
5e. Now save your blog theme.
Important Tips: You must host images through blogger dashboard or services which are using an SSL certificate. The way you can take full advantage of an SSL Certificate. Otherwise, your blog will be shown insecure.
6. Analyze and Fix the Mixed Content
It is possible to have a mixed content issue after using an SSL certificate.
6a. Open your blog on Google Chrome
6b. Press Ctrl+Shift+J keys to open the Javascript console tab.
6c. The mixed content warning may like this.
“Mixed Content: The page at ‘https://yourcustomdomain.tld/’ was loaded over HTTPS, but requested an insecure script ‘http://<some-url>/script.js’. This request has been blocked; the content must be served over HTTPS.”
6d. You can go to Google Blogger Support page to fix the errors.
Other Important Things
6e. You may need to re-upload logo, favicon and other images in your blog/blog post.
6f. You may get the mixed content warning on the archive, label and search pages. Fixed this thing with step 5d.
7. Edit Robots.txt
7a. Go to Blogger > Settings > Search Preferences
7b. Look for Crawlers and indexing. Here edit Custom robots.txt and add the following –
User-agent: Mediapartners-Google Disallow: User-agent: * Disallow: /search Allow: / Sitemap: https://www.yourcustomdomain.tld/sitemap.xml
Make sure to change your domain.
8. Resubmit Sitemap to all Webmaster Tools
Now time for resubmit sitemap to different search engines like Google, Bing, and Yandex.
Your blog sitemap file name is sitemap.xml
and can be found at the following location –
http://yourcustomdomain.tld/sitemap.xml
Note-
This method has some bugs like sitemap.xml does not have https link for any of the blog posts. So it is possible to search engines will crawl and collect both or one version of the blog post whether HTTP or HTTPS.
I believe this guide is useful for you and you’ll be able to use free SSL certificate your custom domain if using Blogger.
Nice. I need some tips related to your content. I am working in Franchise Erp Software In Chennai.
why to use redirects if you can enable HTTP Strict Transport Security (HSTS) which does basically the same?
ah I got it! Blogger just accept www. domains
i have put ssl in my blog domain
Congrats!
Dear sir you are provide great information but page speed insights tool shown my blogger avoid landing page redirects in mobile version,I don’t know how to do it,please tell me,I show you example below:
Avoid landing page redirects for the following chain of redirected URLs.
bloggerguider.com/
bloggerguider.com/?m=1
bloggerguider.com/?m=1
Blogger users do not have control on this thing.
I just enabled HTTPS on my blogger blog for free, thanks a lot for the article
mara nahi ho raha ha
Ho chuka hai tabhi site par laga hai
Choosing flexible is not so good. This may slow down your site. I suggest you to use full SSL for better security and speed.
thanks for your positive opinion.
Now Blogger also provided free SSL certificate for custom domain
You can read our latest post.
Please sir I want to ask you some thing to enable custom https on ur domain is it must i will use custom robots txt to rank well , because some people say that if I didn’t use custom robots tzt also I will not rank well so advice pls
Read our new article. If you are not able to see option add HTTPS over the custom domain. Then wait Google is rolling out this feature to all Blogger dashboards.
Thanks Sir, I just activated mine now
useful information thanks for details.
nice post sir !
now we using godaddy ssl / HTTPS for blogger.
sir, can we use to free ssl security / HTTPS ?
because our blog renewal date will be after 3 months late.
thank you
yes, sure.
Wow nice article thanks
Wow this is a great article
Nice Article.
It’s important that your business website is safe & secure.
#SSL certificates bring a lot of benefits for your #business – they protect your customers, make you look more trustworthy and help you to avoid #Google penalties.
nice article
You have nice post.
Such an instruction is really practical. Can you also do this for cacert.org? The certificates of cacert.org are valid eight times longer and the user is personally verified twice in the Web of Trust. More security is really not possible.
You need to ensure that all resources on your website belong to https.
thank for share!
Thanks for this information it really helps me and others. so keep blogging.
thanks for such information !
Very informative article for all techy guys.
This is an outstanding assessment of how to go about it.
Thanks for providing clear, concise and valuable info. This blog is amazing. SSL certificate is the best way to protect website.
Hi Vinay Prajapati,
Thanks a lot for providing an article on a free SSL certificate. still my blog dint use. Soon I will use my blog and again I come to this article for reference.
Thanks,
Murali Krishna
unexpectedly closed the connection. I am getting this help me.
Hi,
Thanks for providing a clear, concise, and valuable article. The article is very informative and amazing. SSL certificate is the best way to protect one’s website and secure user’s sensitive data.