Request/Fix for next version 4.2.3

Hi, folks
would it be possible to change the pull of jquery on Google from

<script type='text/javascript' src='http://ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js'></script>

to

<script src="//ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js"></script> 
or
<script src="//ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js"></script>

reason being is that we will be testing use of mod_spdy on the server to move all content to https due to Google’s plan to use secure connection as a page rank “signal” in SERPS, and so we’re having to look at doing this… basically loading everything on the site via SSL; and so external resources must be via SSL also to avoid the pop-up “not everything secure on page” or whatever it says these days.

I believe with the // usage Google automatically serves either http or https depending on the referrer.
(REF: https://developers.google.com/speed/libraries/devguide#jquery )

Probably the
http://html5shim.googlecode.com/svn/trunk/html5.js
could be addressed in same way.

I can obviously change this in the templates manually, but thought it would be “worth a look” for those running ecom sites who need “everything https” for local payment forms, and others who are looking to go full SSL for Google “bleeding edge” SEO signals (sigh).

• This topic was modified 11 years by simchris.
• This topic was modified 11 years by simchris.

Ah… I was testing the page via http …. (duh)…. 🙂

Hi Christopher, that’s really a nice thing to look at. I recently moved to Synthesis due to some bad experience with dreampress. They are saying they are the first one to implement mod_spdy.

I want to know from where can i start to implement SSL on this theme. Please provide some guidance.

Thanks

Ssl is implemented at you hosting co., you need ssl cert for your domain, then you load pages via https vs http. Were lucky we have our own server with it installed… Right now testing hookup with mod pagspeed weve been running since dec. typing on ipad, pardon punctuation.

• This reply was modified 11 years by simchris.

Thanks for info Christopher. But i want the perfect results. Does mod_spdy comes with synthesis and is compatible with our theme?

Please guide a little about this. Thanks

Hi, mod_spdy is setup on the server; https is setup on your domain (Google “get SSL cert for my website”) or visit the SSL certificates section in your GoDaddy account if you use them for anything. You need to get SSL cert which is installed for your domain, this then allows your site pages to load via https (secure) vs http just like any ecom site or Amazon, GoDaddy, eBay, etc. The “signed” certificate provides some level of security in that a “signing authority” has verified you are who you say you are before issuing the certificate (your hosting provider may even sell SSL certs at discount; check their site).

Mod_spdy doesn’t do SEO or speed up normal http pages, only those loaded via https (secure). Hence “spdy” (short for “speedy”).

So:
1) get SSL cert for your site; this allows pages and content to load https vs http
2) check with your hosting provider on mod_spdy support which speeds up https so it’s not 10x slower than http

SSL and mod_spdy have nothing to so with the theme. SSL authenticates the website domain, not the content itself per se, although you would get a “warning” if some content is not loaded securely, like an external file not being loaded via SSL.

Hope that helps 🙂

• This reply was modified 11 years by simchris.
• This reply was modified 11 years by simchris.

Great information. Thanks a lot Christopher. I am going to take SSL certificate. Actually, i want to know this because of your first post on this thread about mod_spdy. Thanks anyways.

Regards,

Once you have ssl cert installed, you would likely add a rewrite rule to your htaccess file to gracefully direct old http links to https version. Talk to your hosting provider about activating mod spdy once you have https … And remember to test and update sitemap to ensure links point to https in sitemap, etc.

Once i have everything optimized for ssl i will pass along my adventures…

In meantime for those curious this has some good info…
http://serverfault.com/questions/570288/is-it-bad-to-redirect-http-to-https

Check the entire site for internal links and ensure they are all using HTTPS if you specific your own domain name in links, so you are not causing your own redirects.
Update your <meta property=”og:url” to using the https version of your domain.
If you use <base href= again update to use HTTPS.
Install SPDY protocol if possible
Make sure to use CSS Image sprites where possible, to reduce numbers of request.
Update your sitemaps to indicate https status, so spiders over time learn this change.
Change Search Engine preferences like Google Webmaster Tools to prefer HTTPS
Where possible off-load any stactic media to HTTPS CDN servers.

• This reply was modified 11 years by simchris.

Hi christopher. Thanks for the wonderful information and support. I today purchased SSL certificate from comodo and passed the keys to my host synthesis. I also confirmed them about mod_spdy and they will activate the module as well.

I am little bit confused about the http to https redirection after reading the above post link you provided. Please guide me which is the best practice to handle https redirection.

Further, how can i handle it.

<script type='text/javascript' src='http://ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js'></script>

to

<script src="//ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js"></script> 
or
<script src="//ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js"></script>

Please guide me if i need to take any necessary steps. Thanks a lot.

Hi,
I think the point of Radu’s answer to my question was actually that he has it setup to switch to calling the external google library files such as jqery via https *if* the page being requested is being served via https.

So, once you have an https page to test, you should see the external link to google pulling in that stuff being https vs http.

I stupidly tested my page with http, not https, and so the page source showed the http link, and so I “presumed” that was hard coded, forgetting Radu is a smart guy 🙂