Take the 2-minute tour ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

I own and use a domain for a project. When I type in my domain preceeded by HTTPS instead of HTTP, I am re-directed to a compromising website. How is this possible?

Did somebody buy the HTTPS version of my website? Do I need to own both the HTTPS and HTTP domains to prevent this from happening?

share|improve this question
    
"re-directed" - are you actually being redirected to an entirely different domain? Or are you simply getting browser warnings, as Digital Chris suggests? –  w3d Apr 8 at 20:24
add comment

3 Answers 3

No, you do not need a separate registration. http:// or https:// are just protocol specifiers. The name will resolve to the same host. However, once you're on the hosted machine, the web server determines what to display. Often, HTTP (port 80) and HTTPS (port 443) can be routed to different pages. This should be configurable by the website admin/tools.

In some cases, you might need to purchase an SSL certificate to match your domain name. This provides a chain of trust, verifying that your site is who it says it is. If you haven't done this, you may be using the host's "default" ssl certificate, which can throw name mismatch warnings at you (which might be why you thought it was a compromising website).

share|improve this answer
    
For Google they are two different pages! (which can be overcome, canonnical) –  Martijn Apr 8 at 9:55
    
@Martijn Yes, I addressed that in my answer. Handling different protocols with different content has nothing to do with canonical CNAMEs. –  Digital Chris Apr 8 at 11:32
add comment

If you see a totally different website, and your site is on shared hosting, it may be the case that your hoster has a configuration problem.

This was the case in a similar question:
"https://" refers to random site, "http://" is broken, but "http://www" works

Check if your and the other site are hosted by the same provider resp. on the same IP.

share|improve this answer
add comment

As you say you are directed to a compromising website, I would check that your site hasnt been hacked in some way with a unwanted redirection to the said website.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.