https
 

So now Google is going to use https as a "soft" ranking factor initially, what is the correct way to make your whole site secure, just amend the htaccess ?

You need to set up SSL on Apache (assuming that's your http server) and then install a certificate which you can buy from a number of places.

http://www.sans.org/reading-room/whi...ers-guide-1029

Yes I have all that, I mean how do I get the site to default to https: and not http: I've read that you just alter the .htaccess but I wondered if there is a another recommended method or is it just that easy.

https://wiki.apache.org/httpd/RedirectSSL

https://wiki.apache.org/httpd/RewriteHTTPToHTTPS

^^ Exactly... just use .htaccess to force Https

or if using Wordpress, general/settings --- two urls at top... make them https