topshambookshop.co.uk runs on a 2011 Blogger template over plain HTTP, with no SSL.
- What I saw
- The live site is a Blogger blog with a Simple template by Josh Peterson (noaesthetic.com), generator meta declared as "blogger", blog id 8498202307444286087. The Blogger widget config sets `httpsEnabled: false`, so the secure URL returns Cloudflare 525 and only the insecure `http://` version answers. Every modern browser flags the address bar as "Not Secure" the moment a customer lands. A fixed `width=1100` viewport meta and an `IE=EmulateIE7` compatibility tag complete the picture; the homepage tells phones to render the desktop layout in Internet Explorer 7 emulation mode. The footer still reads "© 2017", and the cookie-consent banner is in German because the default Blogger string was never localised.
- What the rebuild does
- The rebuild ships as a static Astro site on Vercel, HTTPS by default, mobile-first, with `width=device-width` and a 2026 stylesheet. The bookshop keeps its existing domain; DNS is moved over, the Blogger blog is archived, and the only visible change for a returning customer is that the address bar stops shouting "Not Secure" and the phone stops needing two fingers to zoom.