Follow Us On Youtube
Video Transcript
Hi, welcome to the SEO podcast, the unknown secrets of internet marketing. My name is Matt Bertram. I am your host for today. Chris is out, but I have a special treat for you today. We’re going to be discussing, hosting with someone I admire and someone who has now joined our team formerly from Google, formerly from GoDaddy, we’ve actually spun out a division of EWR to launch it’s all our own hosting platform because we feel it’s so important. I want you all to welcome, William, how are you doing William?
Happy to be here.
Awesome. So I know you don’t get in front of the camera much or on podcasts, but I think that this is a unique time to be able to ask what the experts in the field questions that are burning in. Maybe a lot of digital marketers minds. I can tell you hosting is something that I’m sure comes up frequently and problems and issues with hosting and how to deal with things is something that I think all marketers and agencies want solved so they can get back to doing what they do best as marketing, because it certainly is a whole separate thing. Now, when you look though from the standpoint of marketing and hosting and web maintenance of all these other things, they really come together. When you look at like server side technical SEO or server side SEO or suicide optimization, sorry, and technical SEO.
I’m like mincing my words here a little bit, but I thought we could maybe explore some of those topics and maybe get into the nitty gritty for people. That aren’t interesting.
Absolutely. What, what part do you want to cover first?
Well, first I want to back up and say that this episode is sponsored by Ahrefs. Ahrefs is a powerful and free tool to, for website owners who can’t afford a marketing budget and professional SEO tool, but needed organic traffic to the website. They also have great functionality on keywords and they’re updated very frequently versus other competitors. So you can stay up to date with what’s going on. There’s some great auditing and analysis tools. They also do have a completely free tool that is where you get most of the functionality, right? And it’s Ahrefs Forward slash webmaster dash tools. Or you can go to AH refs.com forward slash AWT search engine journal, which I write for wrote that it’s hard to believe that something as useful as this as free Ahrefs with managers tools is a killer service. And I would certainly agree.
So if you’re out there and you’re starting to get into SEO, or you want to see how your website’s doing, I would certainly encourage you to go check it out. All right. So William, I want to start asking you some SEO softball questions and maybe we’ll get a little bit more difficult. All right. So I would say that from a standpoint of where someone should spend their money first. Okay. When you’re looking at your marketing budget, I would argue to say that hosting is the most important thing that you should be doing, right? Why is that? Well, from an SEO standpoint, speed plays into the mix and user experience plays massively into the mix, right?
And so if you’re going to be spending, you know, thousands of dollars, hundreds of dollars, whatever, have you on marketing, you should work into optimizing and making sure your website is up, stays up and runs efficiently first and foremost. And that’s where I think the dollars should go. Can you talk a little bit about user experience and speed of why hosting might be important?
Yeah. So Google looks at the speed of a website, as well as the content layer ship to the website are the two big things that they’re looking for to determine where to rank. And we’ve seen this in sort of like unquestionably cut and dry situations with clients that had something malfunctioning with their website, such that it loaded slowly. And when that thing was malfunctioning on another provider, they went from literally middle of page one to middle of page four, over the time span of two or three days, like nothing else could possibly tank a website tracking that fast.
And then once we got the website speed issues fixed, they went right back to middle of page one again, I mean, Google has made it abundantly clear that speed plays a heavy role in ranking as well as a mobile experience, as far as what they look for. I think a little bit of a misconception is that they are all about the page speed score and while they don’t release the exact details of what they use to rank and only use a page speed is kind of a north star.
What they have come out and said is a therapy focused on core web vitals and page speed tips you off into what those two primary core web titles are, which are largest content, full paint and content leadership content layer shift is kind of a more complicated one and is basically as the webpage is loading, is content jumping around on the screen, such that you’re about to tap on something and then it suddenly moves out of your way. Largest content, full paint is how many seconds does it take to put up on the screen?
The majority of whatever’s supposed to be above the, as far as hosting plays, rule into all of that, having an efficiently structured website, having the right kind of optimization plugins and having a server that is able to respond to incoming connections to the website quickly is what’s going to make the largest difference on, especially that largest content pool paint.
Okay. So let’s break that down maybe into some different parts, right? So speed is important, right? Speed is important. How can you optimize or why do you need a good web hosting company? Like when you talk about SEO hosting, like what’s the difference between normal hosting and say SEO hosting?
Okay. So there are a number of different things that we do differently from what you would call a normal web hosting company on several different levels. And so the first one I’ll get into is going to be a pretty common practice called over provisioning web servers. This is something that almost every web hosting company does out there to some degree or another, and is kind of like a airline flight where they usually all sell a few more tickets. And the airplane actually has room for the differences that with web hosting, they don’t give you a voucher for a later flight, if you choose to volunteer for it. And instead they say, Hey, you three people are all going to have to share this one seat in economy.
And then, so that’s what happens when things get over probation, they basically will put up a web server with thousands of customers on a single server and essentially hope for the best. And it just connections will happen when they happen, but your page will load slowly because of that. And so the first thing we did,
That’s shared hosting, right? That’s what shared hosting would be when people sign up, they have a business that they’re launching and they’re like, Hey, I’m getting hosting for, you know, seven bucks or 12 bucks or whatever. It’s because they’re on a server or on a plane with thousands of other people that have different amounts of traffic that are going in and on the website. And depending on how many people, what time of day it is, what type of websites, all that sort of thing will dictate how fast or they might throttle the website, right. From a speed standpoint. One of the things that I have questioned about that might be good to know is if you’re on a server with like in a neighborhood, right.
In a, not so good neighborhood with not so good traffic, you know, is that something that Google might look at from like a, you know, a hosting standpoint, or can Google parse that out? Like, or is that something that you need to worry about? Do you need to worry about who else you’re being hosted with?
I would say that a couple of things on that, I don’t think that Google strongly ranked based on if you will, the neighborhood, as in like, you’re on the same IP address as these other websites that are also on this IP address that have been behaving problematically, therefore we’re going to play your rankings. I haven’t seen a whole lot of evidence that Google does that. And there are a number of situations where it would be too complicated for them to practically do that. This such as any sort of like cloud-based firewall or CDN sort of provider, all of those use technologies that show is, you know, having a million websites behind the same quote unquote IP address.
So I don’t think that Google ranks based on that having been said, one thing that is worth considering is that if you are in a neighborhood that is, let’s say, you know, experiences, a lot of break-ins, there’s probably things about that neighborhood that are also going to have your house as being one of the ones that’s broken in, as opposed to say, being in a gated community. And if none of your neighbors are ever getting their houses broken into you, probably not going to be worrying too much about whether or not your house is going to be at risk for getting broken.
So you’re talking about web maintenance. You’re talking about keeping everything on the server side up-to-date.
Right. Well, so web maintenance and web security, both, and keeping things up to date is both a performance aspect and a security aspect. But on that security aspect, there’s certainly nothing that’s going to hurt rankings faster than having Google throw up a little tagline by your website that says proceed with caution. The site may be hacked. So that’s what I’m getting at is our, is a, the bad neighborhood thing goes it is sharing a server. It, if your website is running perfectly fast, is sharing a server with other websites going to in and of itself be a problem. No. Is sharing a server with other websites going that are regularly getting hacked. Cause for concern about what’s on the horizon for your website. Absolutely.
So, yeah, I think a lot of people don’t think about that. Don’t think about like, if they think about a property, they maintain that property. They might not think about a website in the digital space that way maybe you can talk a little bit about, you know, just basic best practices for, for web maintenance and web security. I know that from the web security standpoint today in today’s world, it blows my mind all the ways that things can get hacked. I know we saw a client that came to us that was luckily paying with PayPal. Right. So, so they were pushing it to a portal, but they had a functionality to be able to collect credit cards, but they weren’t doing it.
Someone had written a hack to actually catch those credit cards at like, as it kind of wasn’t like man in the middle, right? Like we’re not necessarily Capturing it, putting it in there. Right. You know?
Yeah. Basically what it was is if there hadn’t been using PayPal, the way this code would have acted is when you click the complete order button, it copies whatever you have in the credit card fields and sends it off to the bad guy. And that’s definitely the highest and most impactful sort of risk, you know, a perfect example of what can be catastrophic, especially because that kind of hack is not as likely to get flagged by Google. Mostly Google is looking for the kind of things where it’s like you click on this link and then as soon as you try and click anywhere on the page, it redirects you to some foreign website. What have you?
Yeah,
But that having been said, as far as what’s actually directly impactful to our business, you know, recovering from the, this site may be hacked thing. That’s a difficult and tough road that probably is going to hurt your rankings for potentially six or 12 months. After That, having that, having been said, having to be the guy that says, Hey, it’s my bad that all of you are having to change your credit card numbers. Now, that’s you, that’s far worse around business. I I’ll take six months of not being able to show up on Google over having to try and explain why I’m responsible for, you know, hundreds of instances of credit card fraud type of customers.
I think they’re both bad. I don’t, I don’t want to deal with either of those things. You know, I, I, I also think, you know, web security is good to bring up. There wasn’t there a hack that you found on another website that looked really benign, but was so intricate that you were connecting with the security professionals because it was kind of like a day zero hack or whatever, like no one had ever seen it before.
Yeah, there was. So it was interesting because the version of this hack, the I’ve found was actually simplified and streamlined over what had been documented previously. Like this was a new iteration of code. It sort of like imagine that you have all of the computers in the world with like windows 98 on ’em and then suddenly you come across the first computer to ever that has windows seven on it. And you’re like, whoa, what’s this right? It’s the same authors clearly, but a, a newer version of that code. And yeah, what they had been exploiting was there was a popular WordPress plugin, the provides like add ons, you know, it’s in the same vein of things. There’s like element or Debbie, that kind of thing. And then there’s always ad-ons for these page builders.
And it was one of those that I believe was free. And if you were to just look in WordPress plugins listed show you, it was up to date, which was accurate in the sense that it was on the latest version of the plugin that had come out four years ago, but that plugin had a vulnerability in it that allowed malicious actors to upload basically whatever code they wanted into the website. And so not only did they drop some of these redirection scripts and things like that on the website, they also use their own sort of custom backdoor for the website. So that even if you went and removed the redirection code, it would pop right back up because they’d just log right back into the WordPress site and put it right back there.
See, you know, I think that’s something that’s not talked about as much WordPress is open source, so anybody can write code and put code out there. And, you know, from an SEO standpoint, sometimes WordPress, depending on theme, depending on the plugins creates a lot of bloat, a lot of extra code on a website that really slows it down. So one of the really best practices we talked about is, you know, use as few plugins as possible also ha you know, find some ways to kind of look at reviews or something, you know, when was the last time they updated, like to make sure that plugin is current and a lot of scripts that run are unnecessary, right?
It’s like, you know, it’s like people buying a, a really fancy race car and then they’re just driving around, like on the street with it. Right. They could do all of this stuff, but what do you really need? All that? And you sacrifice, you know, day-to-day performance by not by having the stuff that, that you don’t need. Right. So one of the things that is really important is you need to keep all your plugins up to date. You need to be vetting your plugins on the end. And, you know, like you need to find ways to speed up your website. So images, right. Optimizing images is certainly important. Web P is now out there, how things load. Let’s talk about that. Let’s talk about server, callbacks, how panes load like websites.
I know a lot of people go to those websites and they’re trying to click on a button and the button keeps moving. Right. And, and that creates a bad user experience. And that’s certainly a big no-no from what I’ve seen from what Google stated. Can you talk a little bit about that? How maybe on the back end or on the server side, you can optimize to improve some of that experience.
Yeah. So there that’s a very multifaceted issue, but if we get into kind of the core of what a web page is in general, a webpage is HTML plus JavaScript plus CSS plus images. So we’ll go for the images aspect first, because that’s the easiest. If you’re on our, any of our web hosting plans, one of the plugins you can use is called light speed cache. That’s something proprietary to our servers. And that includes a lot of image optimization. There are two aspects that image optimization. The first one is it makes sure that the images are compressed to a format. They need to be the other thing that it lets you do. However, that is helpful for your wet vital metrics is called a low quality image placeholder.
And what this looks like is essentially it turns any of your images into a super small only takes up maybe a few hundred bytes and looks like the most blurry image you’ve ever seen in your life. But it tells the browser like this is how big this image it needs to be. This is kind of the gist of more or less what color it’ll look like. So it doesn’t create that jar and visual experience. So image optimization, that’s sorta the easiest one to address as far as content jumping around. Usually the way that happens is that you have your HTML layout, that specifies how wide and call each portion of the page needs to be. And then you’ll have CSS that loads on top of that is called in from like a external script that says actually elements with these IDs.
These need to be half the page width instead of this many pixels wide. And then finally, you’ve got Java script that will sometimes do a little bit of shifting as well. Carousels are an easy one that are almost always done in Java script, where you have images that site across the screen, and as it loads, each of those things, it’s getting like more details of instructions about how the page needs to look there way you generally optimize for that is by prioritizing something called critical CSS on a lot of web dot web optimization plans. Other web hosting providers, et cetera, critical CSS is usually a third-party service you have to pay for with us.
It’s a third party service it’s free, but with critical CSS that looks at your website and says, okay, now that this webpage is fully loaded, I understand that these are the 2030 rules. What have you, that the browser needs to understand right away in order to display this webpage. Right? And so it includes a detail at the very top of the list, rather than essentially, you know, kind of having a project with 10 revisions done to it on the fly. Every time you do a load up a webpage instead, it’s like having a hard copy of the first page of the project. So that as you’re starting to read that your browser is getting the other nine pages ready in the back.
Yeah, no, I think, okay. So like, I think everybody kind of has seen that or understands that, or has been to websites recently that are still doing that. Google is dinging people for that, cause it produces a bad user experience. Right? And so there’s probably a lot of in-house or freelance, digital marketers out there that are saying, man, my hosting sucks. And you know, they probably deal with a lot of more of those types of issues than they want to deal with. And maybe they might not be as technically savvy. And so like when you’re doing SEO, you’re doing off-page, you’re doing on-page and then this technical component in the server component get left out. And they’re so much of the mix that it really makes you have to work twice as hard and some of those other areas. Right.
And, and one of the things that I certainly believe in is web hosting should be the foundation before you do all those other things, right? Like that’s.
Th there’s an easier way to explain that too. And I think a lot of businesses, unfortunately, the more I’ve seen it tends to be a, a bigger issue. The larger the businesses are, I think that the smaller businesses tend to do a better job of understanding. This is the importance of location when it comes to the digital aspect. So, you know, if you’re setting up a storefront to sell widgets in the real world, you probably aren’t wanting to have the grand opening of your store, be in a shed that’s in the middle of the farm and the middle of a farm in the middle of nowhere, because like no one will show up to your store. Right. And if they do, it’ll take them way too long to get there. And.
You talking about, are you talking about like where your servers physically located, people don’t think about where your servers physically located from your geographic location, or what are you talking about.
Physically located to an extent, but also just the general environment that your server is in or the general environment that your website is in regards to your, and it goes back to that kind of bad neighborhood analogy. You don’t want to open up a store in a bad neighborhood either. And so the digital side of that is just as relevant in that your digital experience is not like a additional store on top of whatever physical stories you might have. Your digital website is part of your identity as a business in the modern day world.
And so having that digital identity be maintained in a location and location, I mean, both the physical place that your server is in the world, as well as the kind of server your website is on having your digital identity, be in a, what is the digital equivalent of an aesthetically pleasing and safe location is key to half of your business.
Yeah. I think that’s something that not a lot of people consider. Right. They just imagine it’s somewhere in the cloud somewhere. Right. There was all those ads that Microsoft used to run as like, what is the cloud? Like, where is it like, what is it like? I mean, I think that frame of mind has perpetuated how people view a web hosting. Right. And also, I know that you have a background from some of the bigger web hosting companies out there, and maybe you can talk a little bit about what your role was there, because I think we need to paint a little bit of color on how important web hosting is and web maintenance and web security.
I think in today’s world, it is certainly under-discussed and is under thought about, and, you know, I think a lot of times I see that meme of like a system admin and it’s like the, you know, the business owners like, oh, you know, like, why do I pay you so much? Like nothing’s going wrong. Right. And then there’s another picture. And then it’s like, the business are going, oh, why do I pay you so much? And.
Everything’s going wrong,
Everything’s going wrong. Right. Like you, like you have a very difficult job, but you can’t really win. Right. Because in every situation, a lot of this is obscured in the background to what a lot of people look at and see, and they’re only seeing the front end of the website. And so maybe you could talk a little bit about some of those things that for you want to kind of bring to the forefront.
Yeah. So initially my role at I had been doing customer service and then I transitioned from customer service to security investigation and engineering. And in the digital landscape of things, I would compare it somewhat good editor, which makes that systems, administration reference all the more apt because it’s like, oh, what do we have at janitor for the bathrooms are always looking perfectly clean. Like, okay, there’s a reason for that. And that’s because the janitor’s going into him every hour, but in a, the web hosting role, it was mostly dealing with ha reports of hack websites in many cases, ones that were reported to us by external parties.
So one of the most common things for a hack website to have is going to be what’s called a fishing kit, which is that, for example, your website.com forward slash OWA, instead of having loading up anything that has to do with your website, it looks like an office 365 login screen and is trying to get your credentials. Most email providers catch those kinds of URLs really fast. And so the malicious actors out there are also having to repeatedly set those up on tons and tons of different websites. My job at that was to deal with those all day and without going into details as to what kind of numbers that entailed. So high said to say it was a all day, every day thing for a number of people. Like a lot of websites got hacked.
It amazed me the extent to which people would set up a website and then just not touch it. Like, you know, in, in the same way of thinking that they could install windows 3.1 on a computer and then just like, never worry about it. Like what do you mean I need to do upgrade on this 4 86? Like this is working fine for years. Right. And so, yeah. I mean, people would have ancient, you know, 10 years or more, or 10 years old versions of WordPress, they had just never gotten updated.
Yeah. I mean, people understand like upgrades, right. With, with maybe software, right. They understand like phone upgrade with security, like patches. Why do you think that on the website side of things that maybe gets overlooked by business owners or a website owners?
I think first of all, the, one of the things I noticed from the customer experience side of things is that I discovered a surprising number of business owners that don’t actually look at their own website, all that much. I, when I was doing customer support, it wasn’t a frequent thing, but it was not a totally unheard of thing to have someone, you know, asking why their website wasn’t working and turns out it was because their bill hadn’t been paid in four months and they only just found out. So I mean, there, yeah, I, I, I still don’t understand it, but a surprising number of business owners don’t pay attention to their own website.
That much, the other aspect of that is that a lot of the malware that goes onto these websites is very deliberately designed to keep itself concealed from business owners, from the people that are working on the website, et cetera. And the two easiest examples of this that are very common on a lot of these malware problems that websites get. The first one is that the malware is coded in such a way that if you went directly to your website, it sets itself to not run. So if you go into your address bar and type, you know, www.example.com, it wouldn’t run. But if you were to google and search for your website and then click one of the search listings on Google, then the code would see this person didn’t come directly here.
They arrived here from a search engine and then would flag to show them out. The other thing that would be very common on these, and there’s a number of different ways that these scripts would do it. Sometimes they do it by IP address. Sometimes they do it with cookies is a say, if this person has ever been to the website before, don’t show them that like, w we got to hit this person once we don’t need to hit this person multiple times or the malware code, because then it’s way more likely to get caught. So don’t show them the malware if they’ve ever been to the website before.
And so with those two things, you know, if you’re not looking at the website under the hood, you aren’t having the right kinds of firewalls that keep your website from getting hacked in the first place. It’s actually pretty easy for that kind of thing to go on notice.
Yeah. I, I mean, I think that these codes are getting a lot more elegant. These hacks are getting a lot more elegant. And, and I think that, you know, people just don’t look at web hosting as a critical piece of their infrastructure since COVID right. Your digital storefront is like what most people will see. And it’s where most eyeballs will be. Right. And it’s like keeping your store in good working order and in good shape is to make sure you’re doing this in for SEO. If you get one of these hacks and Google picks it up, you’re talking six months or a year. Okay. Like, you know, it re indexes, it finds this Google seller can’t trust you anymore. Right. I can’t show to people.
I can’t show this to our visitors and you’re going to be put in the penalty box for a long time. And, you know, a lot of people drive a lot of business from their website or even e-commerce sites. Like, I mean, it’s a death blow, you know, to a large degree. And if you’re say a small business owner, a smaller, medium sized business owner, you know, your website going down, it’s going to cost you X amount of money, right? Like if you’re a bigger business every minute or every hour you’re losing w w whatever the multiple is of dollars based on how much you generate, right. And,
And the loss on that is actually like relatively easy for a business to calculate. And I don’t think a lot of businesses do the math, but you take, for example, you know, what amount of business for your business, what amount of revenue do you have coming in per year of that revenue? What percent of it is coming in from your website? So we’ll say your business has getting a million dollars a year revenue, and for even numbers, 50% of it comes from your website. So that means your website’s responsible for $500,000 a year in revenue. Just looking at that math like that, just a going that deep with a math, that makes a pretty clear picture that your website is a lot more valuable than people initially think it is.
But then going deeper into that, if your website is responsible for $500,000 a year and revenue, and it is out of operation per se, a day that’s $1,400 or so, and lost revenue from a day of outage. And if say, half of the people that get to your website are coming organically. And so you’ve been thrown back to page four for the next six months, that’s 250 grand or so in lost revenue. Like it ends up fast, you know?
Yeah. I mean, even bigger businesses, have we not seen that? They, from a infrastructure standpoint, I mean, w w you know, we’re going into black Friday, I know we’ve have a client that, you know, we’re not doing the, the web hosting for, and they don’t actually have anybody internally that did it. And during a sale period, their website went down for six hours. And I mean, the amount of revenue that they lost from that certainly can be calculated, but it’s more than enough revenue that they could be taking care of their web infrastructure properly. Right. And, and it’s, you know, it’s kind of like, why do you buy insurance? Right. You know, and insurance is incredibly important.
And, and so I think w you know, we’re, we’re touching a lot of facets here going a little bit beyond marketing, but they all kind of layer on each other and they all are interwoven. Right. And so there’s a lot of agencies out there. Let’s okay, let’s talk about this. There’s a lot of agencies out there that are using some of the bigger providers out there for web hosting, and they have very limited access to their seatbelt, to the backend of their website. They’re very limited on what they can do to affect the performance of the website that ultimately folds into SEO. If you’re, if you’re not working with a provider that is, has SEO in mind and is doing things to optimize the backend of your website and the, the server side of what’s happening.
I mean, that’s a critical piece. I mean, can you speak to maybe, you know, I know, and also like what, let’s talk about what, you know, to wrap up on the hack side of things, you know, how maybe, like, using CloudFlare might reduce some of these things. So maybe we can give some practical tips of what people can do and then have them maybe explaining. And so they understand, you know, what you’re giving up, essentially if you’re using some of these bigger providers. And not only that, like I can tell you, there’s certainly some headaches out there. So as you can see, I’m very biased okay. Of, of the current offerings in the marketplace. I think the current offerings in the marketplace are the same people that have been there kind of since the beginning, they’re well entrenched.
And there’s not a lot of, you know, development into helping service some of these issues. So maybe you could speak to some months.
Yeah. So just to kind of do a ground up apples to oranges comparison, I think the majority of hosting providers out there are a shut-up of sure we’ll have a place for you to run your website and we’ll have our infrastructure set up in such a way that it’ll a bunch of websites more or less. Okay.
Or they’re a reseller, right. They’re just skin, right?
Yeah. Or there it’s seller. We’ve had a, there was one client that I remember left us. And when I looked at where they were going to us, like, I recognize this framework and you think you’re being hosted by your agency, but actually all they have is a reseller account for this other major web hosting or major web hosting company. But we’re from the ground up, you know, most web hosting companies operate off of pretty direct profit margins of like, how many people can we stop onto one server in a way that it won’t, that it will be up most of the time that we won’t have too many people complaining too loudly and we can bring in leftovers for that.
Sounds like it,
The, yeah, I worked for one of those in the past to, Hey, it is our approach to this is that, you know, we want first and foremost to be offering a valuable service. And this was something, you know, that were doing for our own agencies, customers, just as part of like a, Hey, this is one of the things that makes sense for you to be able to have good SEO on your other site. And we decided like, Hey, this is a service that everybody should be able to use. Not just people that are purchasing SEO services from us. And so that’s why we spun it off into its own brand like that.
But from the ground up, what people need to be doing, you know, you need to be on top of the security of your website, the easiest and most straightforward way of doing that is a make sure all your themes, plugin and stuff like that are being kept up to date. And B how it, if you’re a web hosting company does not include any sort of security features with the web hosting beyond SSL certificates, SSLs do not stop you from getting hacked in any way. If you’re a web hosting company, doesn’t include security features have some sort of firewall type offering in front of your web hosting account that can be cloud flare.