Wordpress - Entire Site Https?

[contract]

What's the best way to approach this: Going from http > https across ALL pages.

SSL already install on server.

Looked at plugins for WP, but all were shit. Rather avoid a plugin if possible.

Does every image in theme codes have to be manually changed to https if their hard coded too? What about the advertiser banners, will non-https, screw up everything?

Https is no big deal, but the LAST thing I want to happen is users seeing a notice the site isn't secure and turning away all my traffic. (Even thought it's not ecom/private data related...)

 

[enslam]

If you switch over then everything that is loaded on your site needs to be served over https, including all of your advertising banners. Anything not loaded over https will raise a content warning and trigger the red padlock.

If you want to see how bad things are going to be then open up 443 and click around with dev tools enabled. Your browser will show you all of the requests which the it rejected.

 

[Ryuzaki]

I'm in the same boat. I'm not eCommerce and have no passwords or transactions going on. But I have been reading about this. I'm waiting for more reports that people aren't experiencing a loss of Page Rank due to the 301's, even though they claim to have changed it to not lose juice.

But yes, you'll have to change everything. It has to all be HTTPS. Luckily we can bulk search and replace databases and even through text files to cover HTML, CSS, PHP, and JS files.

I'm not sure which Ad networks haven't switched over yet. For instance, I know that Amazon has switched everything but their aStores. You can load your site and use the dev tools to look at the requests and see, but if you have a large waterfall for ads you may not catch everything.

I'd much rather have no lock icon than have one that's throwing errors when there's no good reason for me to have it anyways. Ultimately I'll switch when all the networks have played catch up and I'm sure I'll see a boost or at least remain steady instead of a loss.

I have someone bulk moving a ton of sites right now. They have committed to telling me the results. With that many sites it should be conclusive, so I'll report back to the forum when I hear.

 

[Flex]

A note on this, make sure to test your analytics tools before making this migration. You should be doing this in a staging environment and verifying your data collection still performs as it did prior.

There is absolutely no reason to use a plugin in a case like this. Setup HSTS on your server when you are ready for migration. Adjust your canonicals, your hardcoded images, your js and css files, and be aware of 3rd party javascript tags as well.