I know you are aware that I take your personal information and privacy very seriously, but up to now I have not secured the areas of this site that need a password entered. I had always thought that passwords on their own were all the security we need. However, I have learnt that a website which collects personal data (names, addresses and email addresses) is still sending those details between the page you enter them on and the webserver itself in plain english for all to (if they have a mind to look) to see.
The way to address this was to buy and install a security certificate for the site (SSL). Now all the admin areas of the site where you enter your name and password to log in are secure. The data is scrambled so that only the webserver can unravel it. This is achieved by various keys and encriptions and means that now, any passwords you choose, are not visible as they travel from the page on your computer to the webserver.
I know this may seem like overkill. After all, it is not as though I am collecting credit card details or offering on-line banking. But I wanted to demonstrate my commitment to providing you with a full, professional site where you can use your passwords with complete confidence, knowing that they are unreadable to anyone else. And as the site develops, there may be more personal information collected for different services and I want you to be used to the site being secure.
It is not too long now before our On-Line bookkeeping service is launched – watch out for that one!
The only difference you may notice on the secure bits of the site is a message asking if you only want to see the content that is served to you securely – or not. Always choose the secure option and make sure the padlock is visible in the address bar. There is no difference in what you see on the page itself if you click to see all content – you will just not see the padlock. The reason for this is the combined nature of the site – partly SSL and partly normal. As some of the pages themselves are pulled out of the non-secure part of the site, you see that message.
I have spoken at length with a wordpress (the software the site is written in) expert who is a client and he warned me against putting the whole site into the secure area as it slows everything down so much. So I opted for this combined approach for now and is why you see (in Internet Explorer anyway) the show the secure items only or show everything option. A pain I know, but proof the security is doing it’s job correctly.
Please do not hesitate to contact me if you wish to discuss any aspect of this security change, or even if you are considering securing your own website, on 0800 047 0731.