JSM Force HTTP to HTTPS / SSL – No Setup, Fast and Reliable vs SSL Zen

A simple, safe, and reliable way to force HTTP URLs to HTTPS dynamically: No setup required – simply activate the plugin to force HTTP URLs to HTTPS. There are no plugin settings to adjust, and no changes are made to your WordPress configuration. SIGNIFICANTLY FASTER than other popular plugins of this type: Other well known plugins use PHP’s output buffer to search & replace URLs in the rendered HTML, which is a technique that is error prone and negatively affects caching performance (as changes are not cached). This plugin uses standard WordPress filters instead of PHP’s output buffer for maximum reliability, performance, caching compatibility, and uses 301 permanent redirects for best SEO results (301 redirects are considered best for SEO when moving from HTTP to HTTPS). Supports advanced proxy / load-balancing HTTP headers: X-Forwarded-Proto (aka HTTP_X_FORWARDED_PROTO server value) X-Forwarded-Ssl (aka HTTP_X_FORWARDED_SSL server value) See Web technology for developers > HTTP > HTTP headers > X-Forwarded-Proto for more details. Plugin Requirements Your web server must already be configured with an SSL certificate and able to handle HTTPS connections. 😉

Secure your website with a Free Let’s Encrypt SSL certificate. SSL Zen is a ‘Free SSL certificate’ plugin that helps you to secure your website, protect your customer’s data and show your visitors you’re trustworthy and authentic. Manually installing a free Let’s Encrypt SSL certificate involves editing SSL configuration files on your web server and troubleshooting issues. With this plugin, you can follow a few steps to get your free Let’s Encrypt SSL certificate. No coding required, no more mixed content, or insecure content warnings. You require no special developer experience to move your HTTP web pages to HTTPS or to force SSL on your website. Features of Free Version: Generate a free SSL certificate by verifying your domain ownership Install the free SSL certificate on your server or cPanel by following our video tutorials Renew the free SSL certificate by re-verifying and re-installing the SSL certificate every 90 days Settings page that shows your SSL certificate validity duration Get an email reminder 30 days before the free SSL certificate expires Secure padlock in the browser using Let’s Encrypt™ Free SSL certificate SSL certificate is a ranking factor for search engines SSL certificate displays information about your domain name and is verified by Let’s Encrypt™ Enable secure payment processing on websites with SSL certificates Note: The free version requires you to manually verify your domain name with Let’s Encrypt by uploading a file on your server. You will also need to upload the free SSL certificate on your server and configure them. SSL certificate from Let’s Encrypt is only valid for 90 days and need to be manually renewed. If you fail to renew your free SSL certificate, your website will start showing a not secure warning to the visitors. If you want the plugin to automatically install the SSL certificate and auto-renew it, please check the premium version of the plugin. Features of Premium Version: Automatic Domain Verification Automatic free SSL Certificate Generation Automatic free SSL Certificate Installation Automatic free SSL Certificate Renewal Automatic HTTPS redirection Accelerate your website with StackPath’s Global Content Delivery Network Premium Support – Live Chat, Email Support Spam Protection Brute-Force Protection Forces Browser Validation on traffic anomalies Performs Real-time threat intelligence for IP addresses, source location, and information on malicious IPs. Patches known vulnerabilities in the Apache Struts framework by blocking requests suspected of exploiting these vulnerabilities Enables a set of rules designed to block common WordPress exploits Blocks clients performing multiple injection attacks. Blocks Probing and Forced Browsing Blocks SQL injection attack attempts Blocks Cross-Site-Scripting (XSS) attack attempts Blocks Shellshock attack attempts Blocks requests suspected of being a Remote File Inclusion attempt Blocks requests suspected of a Local File Inclusion attempt Blocks attempts to access and potentially harm your servers through backdoors Blocks requests suspected of web shell attempts Blocks requests suspected of Response header injection attempts Blocks Invalid User Agents Blocks Unknown User Agents CLICK HERE TO THE BUY PREMIUM VERSION Why get an SSL certificate? Trust – Starting from July 2018, Google Chrome has begun to mark all non-SSL websites as ‘Not-Secure’. When your users see the broken padlock, their trust wavers! Security – SSL certificate provides authentication, trust and compliance. If your customer is filling out forms, or making payments on your website, you need an SSL certificate to protect sensitive data from eavesdroppers. SEO – Google ranks SSL-enabled websites higher than unsecured websites. Hence, securing your website also helps get you on top of Google’s search results. Facing problems with the plugin? We have detailed documentation for the most common issues you might face while installing SSL using our plugin. Please visit our documentation site at docs.sslzen.com Please leave a review If our plugin helped you secure your website, please leave a review here For more information about our plugin, please visit sslzen.com Want SSL Zen plugin in your language? You can directly translate the plugin in your language here When you add translations, get in touch with us as we will get you listed as a Project Translation Editor for our plugin. Legal: By downloading our plugin, You agree to Let’s Encrypt® Terms of Service By downloading our plugin, You agree to LEClient license terms, a PHP LetsEncrypt client library to verify domain ownership and generate an SSL certificate for your website. We use Let’s Debug API, a diagnostic tool to help figure out why you might not be able to issue a certificate for Let’s Encrypt®. We use Freemius to collect non-sensitive diagnostic data about your website should you opt-in. Internet Security Research Group™, Let’s Encrypt®, ISRG™ are trademarks of the Internet Security Research Group. StackPath®, EdgeSSL™ are trademarks of StackPath, LLC. All rights reserved.