Insecure Website

[angelferox]

My browser says my website is not secure. I checked the code for http and didn't find any. I also enacted SSL a month ago and it still says "in progress". This is not my strong point so I need some help. Any help appreciated.

Peter

[indianathomas]

You are probably referring to SSL encryption.  

SSL (Secure Sockets Layer) encryption is a security protocol that establishes an encrypted link between a web server and a browser, ensuring that all data transferred remains private and secure.

When a website lacks SSL encryption, it may display a “Not Secure” warning in browsers, which means that data like passwords, payment details, and personal information are at risk of being intercepted by malicious actors. Websites with SSL encryption have URLs that start with “https://” instead of “http://”, and they show a padlock icon in the browser’s address bar.

1. If your Square POS website displays a security warning, it could mean:  The SSL certificate is expired or misconfigured – It needs to be renewed or properly installed.
2. The site uses HTTP instead of HTTPS – Ensure all pages redirect to HTTPS.
3. There are mixed content issues – Some resources (like images or scripts) might be loading over HTTP instead of HTTPS.

To fix this, log into your Square Online settings and check your SSL settings. If the problem persists, Square’s customer support can troubleshoot SSL.

Domain names hosted on other provided can impact SSL:

Suppose your domain is registered on another hosting provider such as GoDaddy while your website is hosted on Square POS/Weebly. In that case, your SSL certificate can impact if the domain settings are not correctly configured.

How It Affects SSL (Godaddy Example):

1. Square/Weebly Provides SSL Automatically. Square (which includes Weebly) offers free SSL certificates for websites hosted on their platform. However, for SSL to work correctly, your domain’s DNS settings on GoDaddy must be properly pointed to Square/Weebly.
2. Domain Settings on GoDaddy Must Be Correct
   1. Your A record should point to the correct Square/Weebly IP address.
   2. Your CNAME record for “www” should be set to Square/Weebly’s provided domain.
   3. If these records are incorrect or missing, your site may not load securely over HTTPS.
3. DNS Propagation Delay
   1. If you recently changed your DNS settings, SSL might not work immediately due to DNS propagation, which can take up to 48 hours.
   2. Could you try clearing your browser cache or checking your site on another device?
4.  Mixed Content Issues
   1.  If you have external scripts, images, or embedded content using HTTP instead of HTTPS, the browser may still mark the site as “Not Secure.”

How to Fix It (Godaddy Example):

• Log into your GoDaddy account, go to your DNS settings, and verify that your records match the ones provided by Square.

• Check Square’s SSL settings in your Square Online dashboard under Website > Site Settings > SSL.

• If the issue persists, disable and re-enable SSL in Square/Weebly’s settings.

• If you see an SSL Pending status, wait a few hours or contact Square Support for a manual reissue.

[Minion]

Hey @angelferox 

Sorry your having issues with this. Sometimes simple things like this just like to be complicated.  Sounds like the SSL is just getting hung up, but you can try these steps from AdamB to see if that will refresh the SSL for you .

Can you go to Website > General Settings and use the unpublish option at the bottom to unpublish the site, then open the site in the website editor and publish it again? That should trigger a new SSL certificate to be issued for your site.

If those steps above don't work, then you may need to contact support so that they can take a look at  your site and trigger the refresh manually on their end 

Keep us posted!