"http://" and "https://" are the opening letters of every modern web address, and they tell your browser how to talk to the server. The difference is one letter — and it's a big one.
The short version
| http:// | plain, unencrypted traffic — like a postcard |
| https:// | encrypted traffic — like a locked, addressed box |
The s stands for secure. It means traffic is wrapped in an encryption layer (SSL/TLS) using the site's SSL certificate.
What https:// protects
- Passwords and login details typed into forms.
- Payment and personal information.
- The contents of what you read — nobody on the network can see the pages.
- Privacy from tampering: https also stops someone modifying the page mid-trip.
What http:// leaks
Without encryption, everything a visitor submits can be read — and even edited — by anyone along the network path: café Wi-Fi, hotel networks, or an attacker on the same connection. It also produces "Not secure" warnings in browsers, which erodes trust in an instant.
Does a coffee shop site really need HTTPS?
Yes, for three reasons beyond forms:
- Trust. The padlock is a hygiene signal. Browsers increasingly label HTTP sites "Not secure", which looks bad for any business.
- SEO. Search engines treat secure sites more favourably and rank https pages over plain http where comparable.
- It's free. WebFulHost provides the SSL certificate as part of your hosting, so there's no cost or downside.
Making the switch
If your site still loads on http, How to Enable SSL and Force HTTPS walks you through redirecting every visitor to the secure version — and avoiding the mixed content traps that trip people up afterwards.