Secure Sockets Layer (SSL) is a cryptographic protocol that provides communications security over the Internet.

learn more… | top users | synonyms (2)

2
votes
2answers
35 views

How to convince Google to list HTTPS version of website?

Having finally configured HTTPS for my company's website, I'm wondering now if there are any steps I can or should take to convince Google's search results to list the site as an HTTPS link rather ...
3
votes
2answers
202 views

Will canonical tag referencing unsecure HTTP URLs on a HTTPS page cause the unsecure message?

If a secure HTTPS page has a canonical tag referencing the HTTP version, will this cause the message in the browser that the page is using unsecure elements and prevent the green lock icon appearing? ...
0
votes
2answers
33 views

Using SSL Certificates with shared hosting/different domain provider

I need to add a HTTPS address to an existing domain. Unfortunately there two companies involved: One for shared web-hosting, and one for the domain. How do SSL Certificated domains work in such ...
0
votes
0answers
19 views

How apache reverse proxy can be configured without breaking the https tunnel between client & server? [closed]

I have configured apache reverse proxy. In that configuration https connection is possible between client to reverse proxy and again reverse proxy to server. But I want https connection between client ...
1
vote
1answer
32 views

Secure Image is being called Insecure?

I have an image using the secure protocol (https://) but the image is being called insecurely from our homepage using the protocol (http://) - How is this possible? Our SSL Certificate is installed ...
0
votes
1answer
34 views

Using Google Webmaster Tools “change of address” feature for HTTP to HTTPS migration

I'm trying to use change of address in Google Webmaster Tools, and I've followed the instructions and set a 301 redirect for all requests to HTTPS. My site has always used HTTP with a 301 for no-www, ...
0
votes
0answers
11 views

Putting reviewboard behind SSL [closed]

Does anyone know how to put reviewboard behind SSL using wild card certs? I am using reviewboard 1.7.18. This is my first time and I need help with this. Please do not point me to common apache/httpd ...
1
vote
1answer
14 views

Can a HTML form submit to a secure SSL location that keeps the user on the HTTPS site?

I've enabled SSL for my apache server so when I attempt to go to https://mysite/private/index.html, my browser displays a generic dialog asking me to provide my username and password to log in. How ...
1
vote
0answers
19 views

Configuring SSL on tomcat 7 and the files and format required

There exists lot of information on the web and on stackoverflow regarding configuring SSL on Tomcat but it's still confusing and things have not worked for me. I have received two files from the ...
1
vote
1answer
13 views

Can I create CSR for Symantec EV SSL from another machine?

Given the additional checks to validate the organisation for the EV certificates, must the CSRs be created from the actual production web servers? In my capacity as a contractor, I thought I would ...
0
votes
0answers
21 views

Webmail is “Unable to make a secure connection to the server” [migrated]

I am configuring a Ubuntu14/NGinX server and almost everything is up and running (phpmyadmin, ispconfig, etc). I installed Dovecot/Postfix/Squirelmail to establish a mailserver. I followed the ...
2
votes
1answer
87 views

Can forwarding https://example.com requests to https://www.example.com be a security risk?

I maintain a retail store's eCommerce website, provided by a 3rd party. The HTTPS links do not load ('ERR_CONNECTION_TIMED_OUT') unless you put in the WWW before the doman name. The HTTP links forward ...
1
vote
2answers
72 views

Search for my web site returns HTTPS results

My home page is set to Google and Google adds ?gws_rd=ssl to it. When I type search term form my site into search box Google returns bunch of indexes (different pages within my site) that starts with ...
0
votes
1answer
41 views

Why does 301 redirect work for http but not for https?

Through my domain registrar I have set up a domain, essayme.co.uk, to automatically forward to https://google.com. If I go to http://essayme.co.uk it works as expected and redirects me to ...
3
votes
3answers
414 views

Is there a way to disallow crawling of only HTTPS in robots.txt?

I just realized that Bingbot is crawling my company's website's pages over https. Bing already crawls the site over http, so this seems frivolous. Is there a way to specify Disallow: / for https ...
1
vote
1answer
63 views

What's the catch with a 4.99$ ssl certificate

I was browsing the web in search of a cheap SSL certificate just for domain validation. Then I came across a site that sells a certificate for 5 year in a ridicules price of 4.99$ and the one year is ...
2
votes
1answer
55 views

SSL certificate that does not verify identity

(I'm fairly sure I know the answer, but just in case...) We want SSL on an internal-use webserver, but the usual ones don't work for the usual reasons (not static IP, subdomain issues etc.). Server ...
3
votes
1answer
46 views

Nginx and Google Appengine Reverse Proxy Security

The scenario is that I have a Google compute node running Nginx as a reverse proxy to the google appengine. The appengine is used to service REST calls from an single page application (SPA). HTTPS ...
2
votes
1answer
20 views

Plesk refuses to let me set a new SSL certificate

I got a problem when I try to update/change a SSL certificate on a PLESK managed server. One problem might be that I am not so confident at this topic. The setup is the following: I use an virtual ...
0
votes
1answer
35 views

Google Chrome issue with SSL

Using this code: RewriteEngine on RewriteCond %{HTTPS} off RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} My site goes to HTTPS if I type in www.domain.com. HOWEVER, only Google Chrome refuses ...
4
votes
1answer
69 views

How can I serve all resources under HTTPS instead of HTTP without changing their URLs in the HTML code

I know that by using an .htaccess file I can redirect everyone to https://. However, my SSL certificate complains if all the content isn't served under HTTPS. Is there a way to convert all the ...
0
votes
1answer
14 views

SSL not valid for domain

I am in the process of setting up a webmail server and one of the requirements is to have a signed SSL which I obtained through StartCom. During the setup it asked me to define a sub-domain name ...
2
votes
1answer
93 views

Does an SSL Certificate actually require a dedicated IP?

My web host which I have been with for at least going on 8 years now is requiring a dedicated IP address, which is $3.33/Month now for assigning a SSL Certificate with my web hosting package and ...
0
votes
1answer
48 views

Remove www from HTTPS request in Nginx

I have the following code: server { listen 443; server_name www.domain.com; ssl on; ssl_certificate /etc/nginx/ssl/domain.com.crt; ssl_certificate_key /etc/nginx/ssl/domain.com.key; return ...
1
vote
1answer
18 views

Get cipher used for HTTPS with nginx

Background I would like to run several Tornado instances with nginx as a load balancer and static file server. Since both are to be running on the same machine (or atleast the same, private network) ...
5
votes
1answer
72 views

Does Googlebot support TLS v1.2? If not, what will my TLS v1.2-only site look like to it?

I currently redirect all non-HTTPS connections to HTTPS, and support TLS v1, TLS v1.1, and TLS v1.2. I reconfigured my testing server to accept only a very limited and secure cipher suite and TLSv1.2 ...
1
vote
1answer
27 views

protocol relative URLs from other domains

If I am configuring https://foo.mysite.com where I have an SSL cert with CN=foo.mysite.com, but index.html has includes/images/etc loading from http://othersite.com/cat.png and ...
2
votes
1answer
110 views

SSL not working on home page

Recently set up a server for a client and installed a Comodo Positive SSL certificate. In firefox everywhere on the website I can see the padlock icon which shows the Comodo verification, except the ...
1
vote
0answers
38 views

Are there any usable free options for SSL certificates? [closed]

I'm aware that there are old questions in the same vein, but they're from ~2010 and everything has moved on a lot since then. Also, a caveat below excludes the common old answer. Background: I've got ...
3
votes
2answers
80 views

cPanel SSL installation

I've tried transferring SSL issued by GoDaddy to Linux based server. The website was originally hosted in Windows. After the installation is completed, I got a message like this in cPanel: ...
1
vote
0answers
68 views

Migrate a ASP.NET web service from http to https. How to create a SSL certificate that works in test environment on IIS 7.5?

I have a question regarding a web service, http and https. First of all, there is a quite similar question with an accepted answer on StackOverflow. Like the questioner on SO, I have a simple working ...
3
votes
3answers
52 views

HTTPS and HTTP URLs point to different places?

I own and use a domain for a project. When I type in my domain preceeded by HTTPS instead of HTTP, I am re-directed to a compromising website. How is this possible? Did somebody buy the HTTPS ...
2
votes
0answers
17 views

Measuring percentage of visitors connecting over https [duplicate]

Does Google Analytics expose information about the connection protocol used by site visitors? I don't see any option in the customization section... is this something I'd have to use a custom variable ...
1
vote
1answer
72 views

Non HTTPS site is indexed as HTTPS in Google Search

I have hosted a site over shared hosting (ipage) and not have setup SSL certificate (which I don't need), but some how Google have indexed it as HTTPS link which popup security error on opening it. ...
1
vote
2answers
25 views

eCommerce checkout security

I'm developing an eCommerce site and using SagePay as a card processor. Customers will enter their delivery/invoice details into a form which is then submitted to a checkout page. This page encrypts ...
13
votes
5answers
546 views

Force Using SSL on Site now?

I am starting to see a majority of websites starting to use SSL as a standard practice for viewing the website securely now thanks to the revelations of Edward Snowden about the NSA surveillance that ...
0
votes
0answers
52 views

HTTPS redirect to HTTP not working with 'www' subdomain

I have 2 rules on my site: one to force the www subdomain, and another to force the HTTP protocol: RewriteEngine On RewriteBase / RewriteCond %{HTTPS} =on RewriteRule ^ ...
2
votes
1answer
25 views

Apache mod_rewrite SSL vs Non-SSL

I have my site setup with two conf files (one for SSL and one for Non-SSL ) The two confs are at this gist -> https://gist.github.com/akinsgre/9645179 The Non-SSL configuration works fine. When ...
0
votes
0answers
48 views

HTTPS connections for Revive (formely Openx)

I have installed Revive Adserver 3.0.2 (formely Openx Adserver) and everything works fine. But, only if my website its accessed using standard conexion (http). If my website its accessed usin https ...
3
votes
2answers
82 views

Any reason not to buy SSL certificates from a reseller?

Is there any reason to buy an SSL certificate directly from the host (for $49, for example), instead of through a well-known reseller, for only $10.95? Specifically in my case, I just need to ...
1
vote
1answer
71 views

Does the server type matter when purchasing an SSL certificate from Network Solutions for NodeJS?

I am running an instance of ExpressJS using NodeJS and wish to have it start using HTTPS. My company purchases SSL certificates through Network Solutions. When trying to give them my CSR, Network ...
2
votes
1answer
38 views

Can I get source URL from Google search if I switch to HTTPS myself?

HTTPS cloaks the keywords, but I've read that by enabling HTTPS on my site I may at least get the source URL's - if the browser goes from HTTPS -> HTTPS it does not drop the source url in the packet ...
3
votes
1answer
133 views

What steps are required to enable SSL on Apache2 with Ubuntu?

I am developing a strategy game for web where there there will be a lot of client-server traffic for sending attacks, moves, etc. Right now I send messages from the client to the server via HTTP, and ...
0
votes
1answer
32 views

Setting up WordPress protocol using Softaculous & Namecheap

I am setting up WordPress on my new Namecheap domain/hosting account and the site I am building will eventually be offering items for sale (a small personal business site selling vintage items). I'm ...
6
votes
1answer
86 views

If a website is accessed on HTTPS instead of HTTP, should the URLs on the sitemap be HTTPS or HTTP?

I have changed my website from HTTP to HTTPS. At this moment, I have the next rewrite rule working to redirect calls for HTTP to HTTPS: RewriteEngine On RewriteCond %{SERVER_PORT} 80 RewriteRule ...
1
vote
2answers
106 views

Finding different Windows XP Service Packs via User-Agent string

I am planning to get rid of the SHA1 certificate signing algorithm in our certificates and switch over to SHA-256. Problem is, that Windows XP (before SP3) is not supporting this. Therefore I need to ...
4
votes
1answer
87 views

Serving WordPress menu links in only HTTPS or HTTP depending on how it's accessed

I have a WordPress site which uses WordPress HTTPS to enable SSL when users access it via that protocol. However, currently the menu links point back to the HTTP version. I want users to be linked ...
2
votes
1answer
82 views

Intermittent SSL errors

I have a Facebook app hosted on SSL. Some people get "Connection not trusted" when using the app. I do not get the error. I have switched between secure browsing and not using Facebook settings, and ...
2
votes
3answers
66 views

Would a self-signed certificate impact my site for search engines?

Would a self-signed certificate impact my site for search engines? By that I mean, do robots refuse to index sites with self-signed certificates?
1
vote
1answer
44 views

Why do CDNs charge so much for private SSL? [closed]

I've been looking at various CDN services, and many of them seem to charge a pretty hefty fee compared to the free shared SSL offering. One in particular, CDN77, is offering private SSL for $700/year. ...