HTTPS is the secure version of the hypertext transfer protocol (HTTP). It usually uses port 443 and is powered by the TLS (formerly SSL) cryptographic protocol.

learn more… | top users | synonyms (2)

0
votes
0answers
3 views

I have a multisite and i want htaccess to only redirect https to one domain

I have trying to go around this for a while now. i cant seem to get it right i have a website with ssl installed for asingle domain sendsms.co.tz so i want that to redirect to https://sendsms.co.tz ...
0
votes
1answer
14 views

SSL for subdomains on different servers / organizations

I have a scenario where the company I work for is hosting applications for companies on subdomains that point to our servers. Since our application processes credit cards we need to use HTTPS. For ...
0
votes
0answers
13 views

400 Error on www Site Non-www Works Fine [on hold]

I am having a problem with the www. version of my website. It is returning a 400 error. The issue arose when they issued a SSL certificate. The non www. works fine. Both domains point to the same ...
4
votes
1answer
53 views

Schema links and HTTPS

In the process of moving to 100% HTTPS on a site, I performed a site-wide search for http:// in an effort to find potential problems. One common class of instances included "schema links" (certainly ...
1
vote
2answers
32 views

What are duplicate SSL certificates?

I read about these in one of the answers at Why is godaddy HTTPS/SSL certification so much cheaper than digicert, thawte, and verisign? i've tried googling about this particular topic but can't seem ...
3
votes
1answer
24 views

For a IDN domain name, what goes into the CSR's CN field?

Suppose I control the domain name münchen.example.com (xn--mnchen-3ya.example.com). Now, I want to get a SSL certificate for this domain name to enable HTTPS for my web site. I have decided which CA ...
1
vote
2answers
31 views

How to 301 redirect old domain to new domain on same host with SSL and avoid Privacy Error

Here's the environment: Apache, mod_rewrite.c exists WordPress Two domains that point to the same webhost, we'll call them www.olddomain.com www.newdomain.com We have an SSL Certificate for ...
7
votes
8answers
286 views

Huge drop [50%] in traffic after HTTPS move

Currently look after 3 websites. I changed one of them to be HTTPS as it's ecommerce, however have seen a huge drop in organic traffic since this was implemented. Went from around 800 impressions to ...
0
votes
0answers
32 views

Dedicated server issues with SSL and IPs, content showing on wrong site

We have a number of sites on this dedicated server. Pages from one site are showing up on another site. Example: clientsite1.com (right site, no SSL installed) clientsite2.com (forwards to SSL, ...
0
votes
0answers
57 views

ERR_CONNECTION_ABORTED when trying to access https site hosted by IIS 8.5 / 2012 R2 by IP Address in Google Chrome

Warning: This question is largely academic. I have a website in IIS 8.5, with an HTTPS binding on port 8443. The relevant netsh lines are: IP:port : 0.0.0.0:8443 Certificate ...
1
vote
1answer
30 views

https redirects + Cloudflare Page Rules missing situation

I have just moved my website to https and after some scares it is working, mostly. I did find out that when I input the naked domain on the browser it is not going to the desired URL, as follows: ...
2
votes
1answer
46 views

Is an SSL certificate required by law on an e-commerce site?

I've inherited a site which sells digital products (videos) using paypal. The cart and checkout pages are not currently served over SSL. The business is UK based but the servers are in the US. Aside ...
0
votes
1answer
30 views

What kind of SSL cert do I need here

I am in the process of setting up a distributed server setup with each server claiming to use the same domain name. I will be using a geolocation DNS service (there are now several cheap providers ...
1
vote
1answer
24 views

What might happen if I use FTP client without TLS?

For some reason connecting to server using FTP client (eg. filezilla) is not working with TLS encryption enabled. I had to disable it to use FTP. So wondering why is TLS needed in the first place and ...
2
votes
0answers
21 views

Self hosted Windows Communication Foundation (WCF) application and IIS using 443 on different IPs

I have a server that has self hosted WCF application and IIS installed. Server has two IPs assigned. Is it possible to have the WCF application use 443 on IP1 and IIS use 443 on IP2? WCF binds to ...
1
vote
2answers
71 views

Googlebot robots.txt access error on HTTPS when redirected from HTTP

This might be a stupid question, but I never came across this issue before and were not able to find any definite answers to this on the web: Our client migrated to HTTPS a few months ago, using ...
2
votes
2answers
37 views

SSL Certificate for a domain name or IP?

I am a bit confused with all the SSL certificate deal. Can anyone clarify a few things to me please. I have a domain registered on Godaddy and ec2 instance running on AWS with an elastic IP. With A ...
0
votes
1answer
42 views

Is it possible to redirect https to http? [closed]

I am working on a website with Comodo SSL installed. There are http: links to pages that Chrome and IE-11 complain are not secure and block access to them unless users explicitly allow them when ...
0
votes
0answers
16 views

External clients get a certificate mismatch - but internal clients do not [closed]

I have a scenario where external clients are receiving a certificate that is different than the one that is bound to the IIS site. This is Win2008R2 / IIS, in the following configuration: ...
2
votes
1answer
62 views

Accessing subdomain redirects to main domain

I have primary domain (https://example.com) and subdomain (http://subdomain.example.com). I have domain-level SSL certificate installed for primary domain (TLD). And I want access my subdomain via ...
2
votes
1answer
58 views

Force https and no www using htaccess

This question has been asked a million times before but my problem is that this still doesn't work for me, regardless of what code I use so I was wondering if I could have some help perhaps? This is ...
3
votes
1answer
83 views

Bing and lack of SNI support

I invested a few hours yesterday investigating why my site is ranked highly in Google but not indexed at all in Bing. Trial and error using the "Fetch as Bingbot" tool led me to the conclusion that ...
3
votes
1answer
80 views

How do search engines handle protocol-relative links?

With many sites supporting but not requiring HTTPS now, there's an increase in protocol-relative links. A protocol-relative link is one where the protocol is not specified, and the browser redirects ...
2
votes
2answers
140 views

htaccess force HTTPS except one page

This is my current .htaccess file: RewriteEngine On ErrorDocument 404 /404.html # 1 RewriteRule ^extra/([0-9]+)/(.*).html?$ pages.php?do=view&id=$1 RewriteRule ^special-bonus/([0-9]+)/(.*).html?$ ...
1
vote
2answers
24 views

APACHE2: avoid https:// REDIRECT to open phpmyadmin

I have a site https://example.comto ensure that all users go to the https:// I set up a redirect with APACHE (on the default.conf) as followed: <VirtualHost *:80> ServerName example.com ...
0
votes
1answer
28 views

What to do with pages that leaked into SERP due to faulty server configuration

There are two sites on one server: http://www.exampleA.com lives in the root http://www.exampleB.com live in the htdocs web folder SSL on the server was configured incorrectly for ...
1
vote
1answer
32 views

How can I disable the certificate/SSL handshake on the 'www' version of my site served by Apache?

We use SSL on the https://www version of our website. Now I would like to disable the SSL connection on the https://non-www version of our website, so the result is: https://non-www => SSL ...
7
votes
1answer
174 views

What happens to a user's browser if an SSL certificate is replaced in mid-session?

In light of modern browsers phasing out security certificates signed using the SHA1 hash algorithm, we're busy replacing all our SHA1 certificates with SHA2. Generally we could simply replace certs ...
2
votes
1answer
96 views

HTTPS redirect doesn't appear to follow .htaccess RewriteRule, how can I fix this?

I am redirecting example.com to sample.com/?example, so that I can have a modal popup saying, example has changed its name to sample. It works fine for HTTP redirects from http://example.com, and ...
0
votes
1answer
39 views

SSL issue with firefox

My website is hosted on hostgator and i have purchased their ssl service. Now when i open my website in chrome then it works fine but when i open it in firefox it gives me error like The ...
3
votes
1answer
89 views

Multiple Apache vhosts with Basic Auth & SSL

I'm just getting started using Apache and I pretty much have everything configured the way I want, I'm just having trouble with one aspect. A quick overview: I have a document root of "/var/www", ...
1
vote
1answer
25 views

How do I access Windows server on a Microsoft Azure Website?

I need to generate a Certificate Signing Request (CSR) on my Microsoft Azure website in order to get an SSL certificate. I'm attempting to follow this tutorial. Step 1.1 says, On your Windows ...
3
votes
1answer
101 views

How can I force my site to serve just HTTPS and non-www?

I have a WordPress install where all the links are https://example.com. So, users that try to access the site via https://www.example.com will see the site, but none of the images and resources will ...
2
votes
0answers
69 views

Which penalties are possible when switching from HTTP to HTTPS [closed]

When switching our website from HTTP to HTTPS, things went catastrophic: Page impressions went down from average 60 (peak 110) to below 10 (per day). Traffic from search engines dropped to zero. In ...
1
vote
0answers
33 views

Analytics went to 0 when I switched view to HTTPS

I've had my site and Google Analytics operating on HTTP for years perfectly fine. We recently switched over to HTTPS-only for various and the In-Page Analytics stopped working due to the site being on ...
1
vote
0answers
176 views

Excluding Facebook Crawler From Following Htaccess Redirects?

I recently made my website https and it's previous url (http) had many Facebook likes which I would like to migrate to the new https url. The only change to the url was the https, no domain change or ...
2
votes
3answers
43 views

One SSL on two sub domains

I have 2 sub-domains one for support and other for billing. I just wasnt https on these two not the main site. Can i use 1 SSL Certificate on two sub-domains, or i will need to buy two certificates ?
1
vote
0answers
57 views

No one can access our website today using http, but can with https

We arrived at work this morning to find our website was 'down'. It loads a blank white page with no messages at all. It worked fine last night and we have made no changes. (I am the only one who ...
0
votes
1answer
22 views

What changes are coming that would reduce the problems assosciated with HTTPS compared to HTTP? [closed]

I have a web site under development. It is used for surveys but there's an advertising component. As it is very new I have used almost all the latest technologies. AngularJS, ASP.NET WebAPI 2 etc. ...
1
vote
1answer
20 views

If my website uses HTTPS for login then can I server advertising pages?

I have a web site that is used for online surveys. Users will log in, take a survey and at the same time I would like to present them with pay per click advertising while they are viewing the pages. ...
3
votes
2answers
515 views

Mixed content - SSL Problem or Opencart?

This question is related with: Duplicated content www on subdomain and SSL My actual HTACCESS: RewriteBase / # this redirects example.com and www.example.com to https - thanks closetnoc ...
2
votes
1answer
191 views

Duplicated content www on subdomain and SSL

I have a eCommerce based on OpenCart, but I was wondering about change my domain name for SEO purposes. For me the critical thing about my changes are the imminent possibility of domain change, I'm ...
1
vote
0answers
156 views

How to enable httpS without cross redline Ubuntu14.04 with XAMPP 1.8.3 (64bit) [closed]

System configuration Ubuntu 14.04 + XAMPP 1.8.3-5 with PHP 5.5.15 + Chrome 38.xx (64 bit) Now when I run https://localhost/projectName then itc omes red overlines over https and lock icon ...
1
vote
1answer
82 views

When choosing an SSL certificate, what is the minimum encryption level needed to benefit from Google's HTTPS ranking signal?

In August, Google announced HTTPS as a ranking signal. But in order to benefit from this ranking factor, you need to use a 2048-bit encryption. I have only seen websites with 128-bit and 256-bit ...
2
votes
1answer
49 views

HTTPS vs HTTP for SEO [duplicate]

I've read than in 2014, Google will reward HTTPS sites in ranking. In the other hand, I have also read that HTTPS is slower than HTTP. So, in my site, I just have a few HTTPS pages, so my question ...
4
votes
1answer
68 views

How to let users know that the site is available over HTTPS?

My websites are now available over HTTPS, but I don't want to make that the default at this point: My canonical URLs are still HTTP and I'm not ready to make the SEO switch My certificates are SNI ...
3
votes
2answers
157 views

Schema.org itemtype identifier - Should it use relative urls or https links?

In the age of SSL everywhere there are still major sites that lack it. Schema.org for example allows HTTPS but resolves naturally to HTTP. Seems like it would make sense to call upon the HTTPS ...
1
vote
2answers
58 views

Can we use open SSL to generate certifiicates for 100 customer websites?

We have more then 100 customers and we need to set their websites up with SSL. Do we have to buy the SSL certificates from one of the companies (Godddy and etc) or we can use OpenSSL for free?
2
votes
1answer
49 views

When redirecting HTTP traffic to HTTPS, is it OK to redirect non-existant pages to a 404 error?

We've recently converted several of our websites to require HTTPS on all pages. HSTS headers have been set and rules added into Apache to 301 redirect all traffic from HTTP to HTTPS. However, similar ...
2
votes
2answers
31 views

Is there a way figure out which resources in my web page aren't being served securely?

I just secured my web page with SSL, but the browser shows that not all of the resources are sent securely. I tried: commenting out any third party APIs from my web page ensuring that all images ...