[Libs-Or] Tech-Talk: WEB DESIGN – What is SSL and Why Your Website Needs It

HANNING Darci C * SLO Darci.HANNING at slo.oregon.gov
Wed Mar 24 09:51:44 PDT 2021

Welcome to the latest issue of Tech-Talk!

Having trouble reading this email?
You can view the tech tip<https://www.tech-talk.com/what-is-ssl-and-why-your-website-needs-it.html>, the communication tip<https://www.tech-talk.com/use-eom-in-email-subject.html>, and the leadership tip<https://www.tech-talk.com/open-ended-questions-build-trust.html> online instead!
When prompted for a username and password, use ORLIBTECH for both.
Does your website have an SSL certificate?


This Week's Topic: WEB DESIGN

1. ARTICLE & VIDEO ... What is SSL and Why Your Website Needs It
2. COMMUNICATING ... Using eom in the email subject line
3. LEADERSHIP ... One way to build trust

·     Mar 31: 12 Powerful Phrases to Use in Critically Important Situations
·     Apr 14: PowerPoint (G-Slides): Getting Started with Simple Basics
·     Apr 28: Discover Windows 10's Paint and Paint 3D Graphic Tools

Register for Webinars<http://r20.rs6.net/tn.jsp?f=001psI7D446xJmV5TQQKUBS6_54i6c46TLjlAqGTMKFI7wS7oXh4ljvcx-WrC0yU3RBPSfHG1aFxOwlVkEuEIjUvLQ1uTdbYhvRdeFoRmrQsq2fgYUlb7CSctyWu0tPJub7f-02XLhgaIKTKuyPFRiUBZSfyM-FAPWi&c=ZAdsDz1LgWtMxFXNs68JpEaaZaZFaeQ87bTNeENB4VWBBbkNOCVu7Q==&ch=AHQk2N90KGpInFVBVCeuxn9Phrr_-C61W9zCK8IYGRaP9IUnVeFI9w==>

[SSL certificate]<http://r20.rs6.net/tn.jsp?f=001psI7D446xJmV5TQQKUBS6_54i6c46TLjlAqGTMKFI7wS7oXh4ljvczuU1R_iG2vpGc7szJYVFE8g0hHwS_vH0HqNvDNk1f08deEMt2YuKtu85esdqVJYj9K2OXy60fymTd7d27OusP9jCRyY_J0mkKY2nKIM9M9PizVxwtXg9kXyc5sgZ7_RzeTNeKrDZXWJmyM83FwpNuEzXRCrjQINQA==&c=ZAdsDz1LgWtMxFXNs68JpEaaZaZFaeQ87bTNeENB4VWBBbkNOCVu7Q==&ch=AHQk2N90KGpInFVBVCeuxn9Phrr_-C61W9zCK8IYGRaP9IUnVeFI9w==>

Martha Dominguez de Gouveia<http://r20.rs6.net/tn.jsp?f=001psI7D446xJmV5TQQKUBS6_54i6c46TLjlAqGTMKFI7wS7oXh4ljvczuU1R_iG2vp4YgQ8MGz2DNDiX6cMXWp8f9OftSmErTnsn-9lZdSCUsL6vLV9gOWWDjyo7Jkj0-lpsOirp-CiVJn879Wzvr1-UAjBp0nqx6fN4W5XM_2rM-XM70ORfto9KfL9Ug77ZhrleFWcv6aLrvumnrUD1j9AOsLrJWBCGkOIPq8GOJotxJNDbnSrbiulu1EQq3HSOqVDPtv126EgIc=&c=ZAdsDz1LgWtMxFXNs68JpEaaZaZFaeQ87bTNeENB4VWBBbkNOCVu7Q==&ch=AHQk2N90KGpInFVBVCeuxn9Phrr_-C61W9zCK8IYGRaP9IUnVeFI9w==> on Unsplash

Brought To You By State Library of Oregon

[State of Oregon]
Visit Tech-Talk.com Database<http://r20.rs6.net/tn.jsp?f=001psI7D446xJmV5TQQKUBS6_54i6c46TLjlAqGTMKFI7wS7oXh4ljvc5S0xZsQpZFduP05VMLCA8kL-SGBedSdLjht7whPKjGUur1hvJGCnPHXok8wbgApuiMJjT6_7LgBj4ISUrd_Z-ZTIijzB9KHcEvvxsw42sCi&c=ZAdsDz1LgWtMxFXNs68JpEaaZaZFaeQ87bTNeENB4VWBBbkNOCVu7Q==&ch=AHQk2N90KGpInFVBVCeuxn9Phrr_-C61W9zCK8IYGRaP9IUnVeFI9w==>


Questions about Tech-Talk?
darci.hanning at state.or.us<mailto:darci.hanning at state.or.us>

WEB DESIGN – What is SSL and Why Your Website Needs It

[SSL certificate]

With the ease of drag-and-drop website builder tools, it has become much easier for anyone with a bit of technical knowledge to build a website or blog.

However, if you are managing or building a website, did you know that it is critical to have an SSL certificate?

It used to be only required if you were taking sensitive customer information… such as credit card transactions. That's changed! Now it's not a question of IF you have an SSL certificate, but what kind you have.

Let's put it this way… you buckle your seatbelt when you're in a vehicle, you wear a hard hat in a construction zone, you don't share your Netflix password with others (no, really, you shouldn't 😊).

All of these things are designed to minimize risk. That's what an SSL certificate does. Not only does it make visiting your website safer, it reassures your visitors that you have their protection in mind. If you don't have the SSL certificate, people who come to your website might be scared away when they see the words "not secure".


NOTE: If you don't manage a website now and just want to get a non-techie overview of SSLs so you can talk intelligently with others read this article<http://r20.rs6.net/tn.jsp?f=001psI7D446xJmV5TQQKUBS6_54i6c46TLjlAqGTMKFI7wS7oXh4ljvczuU1R_iG2vpJHPgoYSBrtuJzBZamhsQj2p4zwW7R-4-7Grvx-Jzlr5z0r6MBRrrREQ9J4WaEMlWxqCytq-V008kIH3nvkVySFWaCvG3-t9E3Zdxie3mDGX58mktLtESiDlls9asN-kk6_xZy9RMGx0=&c=ZAdsDz1LgWtMxFXNs68JpEaaZaZFaeQ87bTNeENB4VWBBbkNOCVu7Q==&ch=AHQk2N90KGpInFVBVCeuxn9Phrr_-C61W9zCK8IYGRaP9IUnVeFI9w==> ... it will help you stay safe as you wander the internet.

What is an SSL Certificate?

"SSL" is short for Secure Sockets Layer. It creates an encrypted connection between your visitor's browser and your server. It secures data transfers, credit card transactions, log-in and other personal information.



Yes, you can tell if a site is SSL Certified by looking at the beginning of the URL address. It should display HTTPS. A site without the "S" (HTTP) is not secure.

Another way to tell if a site is secure is through the browser designation. Each browser (Chrome, Firefox, Edge) has its own way of displaying that a site is secure with an image of a PADLOCK in the address bar (usually green or gray).

Why is Having an SSL Certificate Important?

Installing an SSL certificate on your website:

·     Provides a safe connection for site visitors to purchase products and services, fill out forms and browse your website safely.

·     Improves the site's SEO so that it can be found in a search. In 2018 Google started to flag websites that do not have an SSL Certificate installed. SSL is now part of Google's search ranking algorithm.

·     Validates the site identity. When you install a certificate a validation process called a Certificate Authority (CA) confirms your organization’s identity.

·     Is part of PCI compliance. If you take credit cards on your site, SSL is required.

What Happens if You Don't Have One?

If you've ever gone to a website page and viewed a message that says "your connection is not private" or it has a "Not Secure" warning next to the URL, you'd think twice about entering the site, right? What if it was YOUR website?


Where Do You Purchase an SSL Certificate?

You could go to a Certificate Authority (CA) like https://letsencrypt.org<http://r20.rs6.net/tn.jsp?f=001psI7D446xJmV5TQQKUBS6_54i6c46TLjlAqGTMKFI7wS7oXh4ljvczuU1R_iG2vp2ES7vgc_7JBWfbBZqQmPQvAMLC6Nry4PNm6srYnX8JIljCn0Cr7H-o3R_WhkSGYfaMi3j6nwTbZUJfLueH1Oxw==&c=ZAdsDz1LgWtMxFXNs68JpEaaZaZFaeQ87bTNeENB4VWBBbkNOCVu7Q==&ch=AHQk2N90KGpInFVBVCeuxn9Phrr_-C61W9zCK8IYGRaP9IUnVeFI9w==>, but then you'll need to configure it in your hosting account.

Or, if your website is hosted on one of the many popular platforms, they most likely will have SSL Certificates (free and paid) -- and provide assistance in the installation process. Working through your hosting company keeps everything "under one roof."

When looking at certificate choices, note the level of validation along with the type of certificate. The cost varies based on these factors.

Types of Validation

[type of validation]

Domain Validated Certificate (DV SSL)

·     Type of business: Works well for small websites and blogs that do not ask for personal information from visitors.
·     What is displayed: HTTPS and the padlock.
·     Verification: This type is the easiest and fastest to get as information about the identity of the website owner is not looked at. But also, the lowest level of validation. Some hosting companies provide this type of certificate free with a hosting package.

Organization Validated Certificate (OV SSL)
·     Type of business: Suited for small to medium-sized sites that do have forms where information is gathered and/or online stores.
·     What is displayed: HTTPS and padlock are displayed and when you click on the padlock more information about the organization is given (name, address, country).
·     Verification: The Certificate Authority (CA) verifies the individual or business that owns the domain with minor vetting.

Extended Validation Certificate (EV SSL)
·     Type of business: For larger enterprise sites.
·     What is displayed: HTTPS and padlock are displayed and when you click on the padlock more information about the organization is given (name, address, country)
·     Verification: The Certificate Authority (CA) verifies the individual or business that owns the domain with extensive background checks on the owner, legal existence, physical location, and more.

Types of Certificates

When deciding what type of certificate to obtain it can depend on the size and type of your website, how many domains or subdomains you have, and if you work in a Microsoft Exchange environment.

Single-Doman SSL Certificate - For a single domain. It can have any of the types of validation (DV, OV or EV as noted above).

Wildcat SSL Certificate - For a single domain (along with subdomains for that domain) are protected. For instance, if you have a certificate for mywebsite.com - then subdomains such as mail.mywebsite.com or members.mywebsite.com are included.

Multi-Domain SSL Certificate (MDC) - Up to 100 different domains are protected under this type.

Unified Communications Certificate (UCC) - Created specifically for environments that use Microsoft Exchange and Office Communications.

If you are confused about what type of certificate is the best for the website you manage, check with your hosting company. They can work with you to make sure your site is secure.


Communicating: Email
End of Message (eom) in Subject box

We all have people at work with whom we communicate through email on a constant basis, right?

Here's a tip that works between people who know each other and have mutually accepted this shortcut.

It's adding "eom" at the end of an email subject ... and not including a message.

·     Eom means "end of message"

·     When you use it in the subject area, they don't have to open the email. (It saves time. It's efficient.)

·     For someone who may not know the code, you can use (end of msg)


·     "Typo on earlier email - should be I am NOW reading Warren Buffett Invests Like a Girl (eom)"

·     "Can we move our meeting tomorrow to one hour later? eom"


One way to build trust: Ask open-ended questions.

We recently asked you for one adjective ... one word that describes a characteristic you felt was most important in being a leader.

The attribute most often mentioned was trust.

There are so many ways you can get others to rely on you to: tell the truth, to follow through with what you say you're going to do, to be kind. In other words, to be trustworthy.

And interestingly enough, the next most frequent adjective suggested as key to leadership was listening. (Well, that's bigger than a bread box, right?)

Here's one "trick" (technique) you can use to improve your listening ... which will in turn increase the trust people have in you ... and will result in you're being a more effective leader.

It's focusing on open-ended questions.

You know, any question that can NOT be answered with a yes or a no ... nor a one-word or two-word reply, Ask something that gets them to open up with their opinion, ideas or feelings.

·     How do you feel about this new assignment? (vs. Do you feel OK with this new assignment?)

·     What is one idea that comes to mind for achieving our goals? (vs. Do you have any ideas for achieving our goals?)

Just concentrating on asking open-ended questions will bring about positive changes in many ways. You'll be perceived as a good listener and therefore someone people might trust.

[Ask a question]<http://r20.rs6.net/tn.jsp?f=001psI7D446xJmV5TQQKUBS6_54i6c46TLjlAqGTMKFI7wS7oXh4ljvc1ZNly9XtPyRL0EW3MoyCtU2yXax-ck2ZXYnx4znqjADB4v6v1fb8TEscLqyiTqCW4Xco3tEEHXSvrM52eGVAo1aDp3dEJwJfkmfUAxt59BNBr6YnBAdbkY=&c=ZAdsDz1LgWtMxFXNs68JpEaaZaZFaeQ87bTNeENB4VWBBbkNOCVu7Q==&ch=AHQk2N90KGpInFVBVCeuxn9Phrr_-C61W9zCK8IYGRaP9IUnVeFI9w==>

Copyright 1996-2021 Shared Results International. Published weekly. Distribution is limited by license. For information on how to include additional recipients, contact support at tech-talk.com<mailto:support at tech-talk.com> 941-355-2092.

The Tech-Talk e-newsletter for Oregon library staff is distributed weekly via the Libs-OR and TechTalk mailing lists. Know someone who might be interested in receiving a copy but they’re not on TechTalk or Libs-OR mailing lists? Have them contact darci.hanning at state.or.us<mailto:darci.hanning at state.or.us> or visit http://listsmart.osl.state.or.us/mailman/listinfo/techtalk to subscribe to just the Tech-Talk newsletter!

Tech-Talk is a paid subscription service for staff of Oregon libraries and is supported in whole by the Institute of Museum and Library Services (IMLS) through the Library Services and Technology Act (LSTA), administered by the State Library of Oregon.

Darci Hanning, MLIS (she/her/hers)
Public Library Consultant / CE Coordinator
State Library of Oregon
darci.hanning at slo.oregon.gov<mailto:darci.hanning at slo.oregon.gov> | 971-375-3491
Follow us: Facebook<http://fb.me/StateLibraryOR> | Twitter<https://twitter.com/StateLibraryOR> | Instagram<https://www.instagram.com/statelibraryor/> | Pinterest<https://pinterest.com/statelibraryor/> | YouTube<https://www.youtube.com/channel/UC0-kU8Gu0jS_YcnXg-b_TRA/playlists>
Continuing Education Resources: https://libguides.osl.state.or.us/conted

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://omls.oregon.gov/pipermail/libs-or/attachments/20210324/ac4be255/attachment.html>

More information about the Libs-Or mailing list