HTTP Stands for "Hyper Text Transfer Protocol", and is the protocol that applications use to access documents/webpages/data from the world wide web.

learn more… | top users | synonyms

40
votes
11answers
5k views

What is the benefit of forcing a site to load over SSL (HTTPS)?

Let's say I have a large content-only site; no login or logout, no usernames, no email addresses, no secure area, nothing secret on the site, nada. People just come to the site and go from page to ...
40
votes
6answers
5k views

When webservers send a page, why don't they send all required CSS, JS, and images without being asked?

When a web page contains a single CSS file and an image, why do browsers and servers waste time with this traditional time-consuming route: browser sends an initial GET request for the webpage and ...
18
votes
3answers
4k views

What does WWW do?

To be clear: I am not asking whether or not I should use www in my url, or what the pros and cons are, that topic is well covered. I also wasn't sure if this was a Stack Overflow, Server Fault, or ...
15
votes
2answers
5k views

What are the Consequences for using Relative Location Headers?

According to the spec, Location headers used in a redirect require a server name HTTP/1.1 301 Moved Permanently ... Location: http://example.com/foo/baz/bar However, in 2012, most web browsers will ...
12
votes
5answers
3k views

Does it make sense to return a 410 instead of 404 when some page has been permanently removed?

Does it make sense to return a 410 instead of 404 when some page has been permanently removed? In this video, Matt Cutts says that Google treats them the same, but are there other reasons to implement ...
12
votes
4answers
2k views

Loading main javascript on every page? Or breaking it up to relevant pages?

I have a 700kb decompressed JS file which is loaded on every page. Before I had 12 javascript files on each page but to reduce http requests I compressed them all into 1 file. This file is ~130kb ...
12
votes
2answers
2k views

Considerations of the HTTP Content-MD5 Header

We are debating whether to use the Content-MD5 header. Pros: The CMS allows us to easily include it with minimal overhead (cached responses in 80%+ of the cases). It would add another layer of ...
11
votes
4answers
2k views

How can I find out what other websites are hosted from my website IP address and why is that important from SEO point of view?

I heard that is important from a SEO perspective what other websites are hosted on the IP address on which my website is stored. Do other websites hosted on my server/VPS affect my search results in ...
11
votes
1answer
2k views

Canonical URL for a home page and trailing slashes

My home page could be potentially linked as: http://example.com http://example.com/ http://example.com/?ref=1 http://example.com/index.html http://example.com/index.html?ref=2 (the same page is ...
8
votes
3answers
425 views

What is the correct HTTP status code for: “This version of this API has been discontinued”?

I have a RESTful API. There are 3 versions of it: v1, v2, and v3. I am about to publish v4, and we have decided to discontinue v1, meaning that all requests to http://example.com/v1/resource will fail,...
8
votes
0answers
693 views

Why is honest cloaking for Ajax considered bad practice? [closed]

Ajax-only websites are laden with many problems. Search engine invisibility is merely a small problem. They are also unbookmarkable and unlinkable and they break the functionality of back- and forward-...
7
votes
3answers
2k views

Can an HTTP status 400 be a substitute for a 410?

As I shift many URL's on my site from non-friendly to friendly, I came across an old URL that was used for testing that google later ended up scanning but now I no longer use the URL. Its in the ...
7
votes
3answers
5k views

HTTPS best practices for SEO and usability

Consider a page, http://example.com, which can be viewed both publicly and when a user authenticates. Now suppose you enable HTTPS for every page when a user logs into your website, but only when they ...
7
votes
3answers
5k views

Interpretation of empty User-agent

How should I interpret a empty User-agent? I have some custom analytics code and that code has to analyze only human traffic. I have got a working list of User-agents denoting human traffic, and bot ...
7
votes
1answer
158 views

Does the SPDY protocol eliminate the need for cookieless domains?

With plain HTTP, cookieless domains are an optimization to avoid unnecessarily sending cookie headers for page resources. However, the SPDY protocol compresses HTTP headers and in some cases ...
6
votes
5answers
2k views

WWW.yoursite.com or HTTP://yoursite.com which one is futureproof?

http://yoursite.com www.yoursite.com http://www.yoursite.com yoursite.com Which of these would you choose as your favourite to work with, if you were to make a site for 2011 and beyond, which ...
6
votes
2answers
470 views

HTTP for one part of the site, HTTPS for other

We have a site which is HTTP, but it has an admin part. How can we secure the admin part with HTTPS? For example, WordPress (which I know) is located at http://foo.com, but we want to have https://...
6
votes
2answers
410 views

Plus sign in front of URLs in user agents

I run a small web crawler and had to decide on what user agent to use for it. Lists of crawler agents as well as Wikipedia suggest the following format: examplebot/1.2 (+http://www.example.com/bot....
6
votes
2answers
109 views

HTTP: How to be deleted from search engines at a certain point in time in the future?

Is there a way to tell search engines, that a page they crawl should be included in the search results now, but have to be deleted at a certain time in the future? I have a website where hundreds of ...
6
votes
1answer
2k views

When to reply 400 Bad Request

According to www.w3.org, a Web server should reply with status code 400 Bad Request if: "The request could not be understood by the server due to malformed syntax. The client SHOULD NOT repeat ...
5
votes
2answers
2k views

Should 304 Not Modified responses include the “Last Modified” header?

I've been using the most excellent http://redbot.org tool for testing have HTTP headers on my site correct (its custom code in PHP serving dynamic content - wanting to ensure it cached where possible -...
5
votes
1answer
304 views

Will it have a negative influence on search engine ranking if my main site is working over HTTPS but my blog isn't?

Suppose I have domain working https like https://www.example.com/ and my blog is working without https like http://blog.example.com/. Is that wrong from SEO or Google point of view?
5
votes
1answer
593 views

Is there a Java-based web browser that doesn't follow hyperlinks properly?

Looking through my logs, I get this error a lot: A potentially dangerous Request.Path value was detected from the client (:). The error is usually due to someone navigating to a URL like this: ...
5
votes
1answer
2k views

Make server force Excel to hand over hyperlink to browser without trying to load the page itself

I am not sure if this is an Excel (SuperUser) or WebMasters question since I may have exhausted the server option. Use case Our site allows downloading a result list in XLS format. A hyperlink is ...
5
votes
1answer
4k views

Locate sitemap at HTTP or HTTPS?

Our homepage has a 301 redirect from HTTP to HTTPS but all other pages on the site are on HTTP. (1) Should the sitemap be located at HTTPS and is there any problem if we: (2) include the HTTPS ...
5
votes
1answer
5k views

HTTP Header Cache Time: s-maxage and max-age

I am setting up a CDN for my website, I found the following sample for adding to the 'httpd.conf' file, this is used to adjust the cache-time for client and CDN: ExpiresActive On ExpiresByType image/...
5
votes
2answers
106 views

Browser privacy improvement implications for websites

On https://panopticlick.eff.org/ EFF let you test the number of uniquely identifying bits that the browser gives a website. Among these are HTTP header fields such as User-Agent, Accept, Accept-...
5
votes
1answer
155 views

Cannot access my own web page

I am developing, learning and experimenting with php,html,javascript,flash and so on. Having web hosting and all of the cpanel, phpmyadmin and other utilities. One day, while updating information, ...
5
votes
1answer
2k views

Redirect from SSL HTTPS to HTTP (NO SSL)

Many of my visitors have bookmarked my site already with https://mydomain.com. Under the bad advice of a programmer I have put my whole site (Joomla) using SSL. I do not sell anything or provide any ...
5
votes
0answers
25 views

Is it an overkill to specify the accept-ranges header for small HTML pages?

I tested my site homepage through rigor.com (formerly zoompf.com) and they believe all resources should have an accept-ranges header, but since my HTML code size is under 20 KB (mostly under 10 KB), I ...
4
votes
3answers
9k views

Apache logs: “::1 … ”OPTIONS * HTTP/1.0" 200 -

Just looking at logs of a not-so-busy site on one of our Apache servers and notice tons of these in the log: ::1 - - [15/Apr/2011:12:11:40 -0700] "OPTIONS * HTTP/1.0" 200 - ::1 - - [15/Apr/2011:12:11:...
4
votes
1answer
117 views

Is there a way to return a response every x seconds or so to a single http request?

I'm wondering if it's possible to send a response every second or so to a single http request. Like for example the client makes an http request, then the server sends a space character every second. ...
4
votes
2answers
193 views

HTTP response for deleted or disabled items on ecommerce store

What HTTP response should you send when an item/category on your ecommerce site has been disabled or deleted? 410 looks correct for deleted products but not sure about something that has been disabled ...
4
votes
1answer
13k views

Configure Apache HTTP 2.2 for PUT method

I've written code for file upload and download using HttpWebRequest/HttpWebResponse class in C# with Apache 2.2 as a web server. In code I'm using request.method = "PUT". I want to config my HTTP ...
4
votes
1answer
52 views

Proper status code for language redirection (301, 302, … 307)?

I have build a websites with multiple languages. The URLs look like: http://www.example.com/en/ http://www.example.com/de/ If the user access the main domain http://www.example.com/ the web server ...
4
votes
1answer
48 views

Splitting an existing site into sub-domains and using a landing page with an http 301 - is this just wrong?

I currently manage a website for a large(ish) primary school. I'm in the process of rebuilding their website, and have had a thought today about how to potentially better organise the content. We ...
4
votes
1answer
1k views

How to track HTTP and HTTPS from the same Google Analytics account?

I have a website with tutorials and a discuss forum. The website load on http protocol and the forum load with https for security reasons. For both of them I run the default Google Analytics code, but ...
4
votes
1answer
266 views

HTTP Headers caching

I am not totally sure bout HTTP headers, but from what I read its good to have some level of caching on static pages also I am not sure if Transfer Encoding: chunked is a good thing. I was not finding ...
3
votes
2answers
314 views

Will canonical tag referencing unsecure HTTP URLs on a HTTPS page cause the unsecure message?

If a secure HTTPS page has a canonical tag referencing the HTTP version, will this cause the message in the browser that the page is using unsecure elements and prevent the green lock icon appearing? ...
3
votes
5answers
276 views

When responding with a HTTP 3xx Redirect status, should there still be a response body?

When a service is answering an HTTP request with a "3xx Redirect" status code response (and the accompanying Location header) should it still send a meaningful response body along with the response? ...
3
votes
3answers
186 views

HTTPS and HTTP URLs point to different places?

I own and use a domain for a project. When I type in my domain preceeded by HTTPS instead of HTTP, I am re-directed to a compromising website. How is this possible? Did somebody buy the HTTPS ...
3
votes
2answers
2k views

What is the default behavior of Cache-Control

If no private nor public were defined in the cache-control, e.g. Cache-Control: max-age=31461276 What is the expected behavior?
3
votes
2answers
2k views

What are reasons of latency for a HTTP request to load HTML?

I would like to know what are reasons of latency for a HTTP request to load HTML part of a webpage. I think about: loading webpage with proxy not having a good web server (apache vs nginx) having a ...
3
votes
2answers
2k views

I used a 301 Permanent Redirect to a 3rd party site by mistake! Can I stop the redirection?

Oh Noes! I've been parking a domain name for a friend/client of mine on my hosting provider (Dreamhost, FWIW) for a while, and they eventually asked me to redirect their domain to a 3rd party website ...
3
votes
2answers
211 views

What MIME type are you meant to use for JavaScript files?

In the html we always use <script type="text/javascript" charset="utf-8" src="???"></script> (the ECMA stuff confuses some browsers) but on the HTTP side what are you meant to use as the ...
3
votes
1answer
42 views

What are the differences between a regular HTTP web server and a REST server?

I am learning about REST services and from what I understood until now the only difference is the language of the file that is outputted by the script that runs as a backend. Can a regular web server ...
3
votes
2answers
122 views

Is there additional overhead for status code 500s?

We have these web applications that require specific information in a query string. If that information is not provided, the applications throw an error. It seems to me that we should explicitly ...
3
votes
2answers
32 views

Why is Googlebot calling an AJAX method with GET rather than POST?

I have an AJAX call on my site that does a POST and returns data. Googlebot is crawling these URLs but it is attempting to use a GET method rather than a POST. This is causing hundreds of 404 error ...
3
votes
3answers
60 views

How to properly tell Google they have no right to access the download. What status do I use?

I'm looking for the SEO way to tell Google not to download pictures. I have a script that generates one of two things based on who accesses the site: If an unauthorized robot accesses the site, they ...
3
votes
1answer
219 views

How do search engines handle protocol-relative links?

With many sites supporting but not requiring HTTPS now, there's an increase in protocol-relative links. A protocol-relative link is one where the protocol is not specified, and the browser redirects ...