HTTP vs HTTPS website

[hoosierdraft]

Get a call out of the blue from a dude at 3dcart saying that he is conducting a yearly review of my website. Said that he noticed a very low conversion rate on the site in spite of significantly growing traffic. Explains that Google is on mission to get websites to make all pages secure using HTTPS. Claims it has lowered my search results on Google. A couple questions:

1.What the heck is someone from 3dcart doing "reviewing" my traffic and conversions?? Did I sign some general release allowing them to access my site stats for their benefit?

2.What is involved in converting my website to all HTTPS pages not just the checkout pages?

3.Recommendations on converting or not converting?

Thanks for your input.

[Pack Secure]

I found this https://support.3dcart.com/Knowledge...do-it-properly

[DeanP]

1) Well, I think the idea is that it's for your benefit. But in any case pay close attention to calls like that; it's not uncommon for third parties to contact store owners and mention 3dcart as part of their hasty and rambling introduction, which leads some people to mistakenly believe that they're talking to a 3dcart staff member. I've been fooled a couple times myself and have had to back-track and ask, "wait, wait - what company do you work for again?"

2) I can confirm the steps in that KB article - it's pretty straightforward and simple.

3) Definitely do. One day the non-HTTPS web will largely be a thing of the past, and things will be safer and better for everyone - but everyone has to do their part to get us there.

[hoosierdraft]

Thanks Pack Secure and DeanP. Proceeding down the HTTPS road cautiously.

[Pack Secure]

You're Welcome.

[Luxlife]

In copying the information from non-secure robot.txt to the secure, do you overwrite or just add it? It appears an overwrite is the correct way.

[JoeBTI]

Overwrite.

The instructions don't say it, but Google suggests to add the HTTPS property. "Add the HTTPS property to Search Console; Search Console treats HTTP and HTTPS separately; data for these properties is not shared in Search Console. So if you have pages in both protocols, you must have a separate Search Console property for each one."

I was too scared to delete the http one, so I left it and there has not been any issues.