Question:

I am in the process of adding a second domain to my existing website, which is already secured with HTTPS. However, I’ve noticed that when accessing the site through this new domain, it defaults to an HTTP connection. Is this a standard occurrence? Additionally, is it necessary for me to set up HTTPS specifically for this new domain to ensure it maintains the same level of security as my primary one?

Best regards,

Seb”

Answer:

Dear Seb,

Your observation is quite astute and touches on a critical aspect of modern web security. When you add a second domain to a website that’s already secured with HTTPS, it’s not uncommon for the new domain to default to an HTTP connection initially. This happens because the SSL/TLS certificate, which facilitates the HTTPS protocol, is tied to the specific domain name for which it was issued.

To ensure that both your primary and secondary domains maintain secure connections, you will indeed need to set up HTTPS for the new domain. This involves obtaining and installing a separate SSL/TLS certificate for the second domain or, if your certificate issuer supports it, expanding your existing certificate to cover multiple domains—a feature known as a Subject Alternative Name (SAN) certificate.

Here’s why this is important:

: HTTPS encrypts the data exchanged between a user’s browser and your website, protecting it from interception or tampering. Without HTTPS, any data transmitted via the new domain is vulnerable.

2.

Trust

: Users have come to expect a secure connection as a sign of trustworthiness. Browsers also flag HTTP sites as ‘Not Secure,’ which can deter visitors.

3.

SEO

: Search engines favor HTTPS websites, so securing your second domain could also benefit your search rankings.

In conclusion, while the initial HTTP default for your new domain is standard, transitioning to HTTPS is essential. It safeguards user data, builds trust, and can even enhance your website’s search engine optimization. Take the necessary steps to secure your second domain, and you’ll be well on your way to providing a safe and reliable experience for all your users.

Best regards,

[Your Name], Web Security Expert