Secure Sockets Layer (SSL) is a cryptographic protocol that provides communications security over the Internet.

learn more… | top users | synonyms (2)

4
votes
5answers
8k views

How can I pass referrer header from my https domain to http domains?

My website is 100% https. I have links to other http domains. The referrer header is not set when linking from a https page to a http page. From http://en.wikipedia.org/wiki/HTTP_referrer If a ...
1
vote
3answers
26 views

How can I make a browser trust my SSL certificate when I request resources from an external server?

I have installed an SSL certificate on one of my domains and it works perfectly, but on some pages I include a Google Font, which causes my certificate icon to change in: instead of: The reason, ...
1
vote
1answer
30 views

Google is re-indexing pages after redirecting URLs from HTTP to HTTPS incorrectly

I upgraded my site so that all pages have gone from using HTTP to HTTPS. I didn't consider that Google treats HTTPS pages differently than HTTP. I recreated my sitemap to so that all links now ...
1
vote
0answers
12 views

Facebook likes reset after moving to HTTPS

I've got a question regarding the Facebook like button. We worked on a piece recently that embeds a number of social share buttons (please see the source code below). When the piece was released, it ...
4
votes
1answer
92 views

Serving WordPress menu links in only HTTPS or HTTP depending on how it's accessed

I have a WordPress site which uses WordPress HTTPS to enable SSL when users access it via that protocol. However, currently the menu links point back to the HTTP version. I want users to be linked ...
0
votes
2answers
63 views

Lost website rankings as a result of using a 302 redirect instead of a 301

I have an online store and during the last 2 days I noticed a big change in its SERPS for some keywords. The site is indexed in local Google for 5 keywords, and the online store is based on Magento ...
3
votes
2answers
75 views

Switching to HTTPS - redirect question

Following the recent Google announcements about improved ranking for sites running on https we have a number of clients asking about this. Is it safe to just 301 redirect all pages to their SSL ...
0
votes
0answers
17 views

HTTP to only HTTPS Google wmtools [duplicate]

I recently changed one of my sites to HTTPS only and redirecting traffic to HTTPS from HTTP. This is all working fine however Google webmaster tools is complaining that it cannot access the http ...
8
votes
2answers
132 views

Are there any disadvantages to Cloudflare’s “Flexible SSL”?

Cloudflare let you serve your site over SSL without having to purchase and install a security certificate, a product they call “Flexible SSL”. (They act as a proxy and serve your site over SSL from ...
0
votes
0answers
15 views

convert multiple domains to a single domain

I have an apache server hosting with one IP address hosting a www and a 'sub' domain using . which worked fine until I needed an EV certificate which works on only 1 domain...and can't be used until I ...
3
votes
2answers
91 views

cPanel SSL installation

I've tried transferring SSL issued by GoDaddy to Linux based server. The website was originally hosted in Windows. After the installation is completed, I got a message like this in cPanel: ...
1
vote
1answer
50 views

Apache Rewrite Rule non-www to www + http to https + remove trailing slash

I would like to accomplish the following: rewrite non-www to www redirect from http to https remove trailing slash e.g. http://medexpress.co.uk should redirect to https://www.medexpress.co.uk ...
5
votes
3answers
103 views

New Google SEO benefit with SSL - with only a few sections in SSL, or always on?

Google just announced that SSL will affect site ranking positively: http://googlewebmastercentral.blogspot.se/2014/08/https-as-ranking-signal.html I have an Easter Island tourist agency called Easter ...
0
votes
1answer
22 views

Will previous 301 redirect still be cached if site switches to using SSL?

For reasons only my past self knows I put a 301 redirect in place to force all traffic to example.org from www.example.org. Put simply it dropped the www. subdomain. Now I would like to change it so ...
2
votes
1answer
298 views

HTTP and HTTPS impacts on SEO

I have a website http://www.domain_1.com/ hosted in a shared webserver. I have used SSL for another website https://www.domain_2.com/ on the same server. Due to some technical limitations (single ...
0
votes
0answers
21 views

How do I notify Google of a change of address from http to https? [duplicate]

I've just switched a site from http only to https only (on the same domain name), and have 301 redirects from old to new in place on a page by page basis. How do I now inform Google, using Webmaster ...
1
vote
1answer
24 views

Can a HTML form submit to a secure SSL location that keeps the user on the HTTPS site?

I've enabled SSL for my apache server so when I attempt to go to https://mysite/private/index.html, my browser displays a generic dialog asking me to provide my username and password to log in. How ...
0
votes
0answers
31 views

Is it possible to get safe SSL certificates for free? [duplicate]

I was looking at reseller hosting at host xxxxxx. They provide unlimited free SSL certificates which I can resell to my clients. This looks too good to be true. I sent them a mail if they're ...
16
votes
6answers
20k views

Is unique IP address a must for SSL?

The shared hosting company told me that if I buy an IP address then it will be applicable for the addon domains too. What does it mean? Then the SSL certificate won't work since there will be more ...
0
votes
1answer
35 views

Rewrite URL with masking from HTTP to HTTPS site (on a different server) are certs needed on first server?

I have a *:80 virtual host in Apache 2.2.15 which is just a bunch of URL rewrites like: ServerAlias foo.bar biz.baz tit.tat RewriteRule / http://somesite.com (R=301,L) ServerAlias differentsite.com ...
1
vote
1answer
203 views

Where to place web.xml outside WAR file for secure redirect?

I am running Tomcat 7 and am deploying a bunch of applications delivered to me by a third party as WAR files. I'd like to force some of those apps to always use SSL. (All the "SSL" apps are in one ...
6
votes
2answers
82 views

Does Googlebot support TLS v1.2? If not, what will my TLS v1.2-only site look like to it?

I currently redirect all non-HTTPS connections to HTTPS, and support TLS v1, TLS v1.1, and TLS v1.2. I reconfigured my testing server to accept only a very limited and secure cipher suite and TLSv1.2 ...
16
votes
6answers
13k views

Why is godaddy HTTPS/SSL certification so much cheaper than digicert, thawte, and verisign?

I am a novice on HTTPS/SSL but GoDaddy charges $12.99 and Digicert, thawte, and Verisign charge $100-1000+ for SSL certificates. I must be missing something on the quality of the encryption or ...
2
votes
2answers
52 views

How to convince Google to list HTTPS version of website? [duplicate]

Having finally configured HTTPS for my company's website, I'm wondering now if there are any steps I can or should take to convince Google's search results to list the site as an HTTPS link rather ...
3
votes
2answers
216 views

Will canonical tag referencing unsecure HTTP URLs on a HTTPS page cause the unsecure message?

If a secure HTTPS page has a canonical tag referencing the HTTP version, will this cause the message in the browser that the page is using unsecure elements and prevent the green lock icon appearing? ...
0
votes
2answers
36 views

Using SSL Certificates with shared hosting/different domain provider

I need to add a HTTPS address to an existing domain. Unfortunately there two companies involved: One for shared web-hosting, and one for the domain. How do SSL Certificated domains work in such ...
1
vote
1answer
35 views

Secure Image is being called Insecure?

I have an image using the secure protocol (https://) but the image is being called insecurely from our homepage using the protocol (http://) - How is this possible? Our SSL Certificate is installed ...
0
votes
1answer
76 views

Using Google Webmaster Tools “change of address” feature for HTTP to HTTPS migration

I'm trying to use change of address in Google Webmaster Tools, and I've followed the instructions and set a 301 redirect for all requests to HTTPS. My site has always used HTTP with a 301 for no-www, ...
0
votes
0answers
11 views

Putting reviewboard behind SSL [closed]

Does anyone know how to put reviewboard behind SSL using wild card certs? I am using reviewboard 1.7.18. This is my first time and I need help with this. Please do not point me to common apache/httpd ...
1
vote
0answers
20 views

Configuring SSL on tomcat 7 and the files and format required

There exists lot of information on the web and on stackoverflow regarding configuring SSL on Tomcat but it's still confusing and things have not worked for me. I have received two files from the ...
1
vote
1answer
16 views

Can I create CSR for Symantec EV SSL from another machine?

Given the additional checks to validate the organisation for the EV certificates, must the CSRs be created from the actual production web servers? In my capacity as a contractor, I thought I would ...
3
votes
2answers
83 views

Any reason not to buy SSL certificates from a reseller?

Is there any reason to buy an SSL certificate directly from the host (for $49, for example), instead of through a well-known reseller, for only $10.95? Specifically in my case, I just need to ...
2
votes
1answer
92 views

Can forwarding https://example.com requests to https://www.example.com be a security risk?

I maintain a retail store's eCommerce website, provided by a 3rd party. The HTTPS links do not load ('ERR_CONNECTION_TIMED_OUT') unless you put in the WWW before the doman name. The HTTP links forward ...
1
vote
2answers
117 views

Finding different Windows XP Service Packs via User-Agent string

I am planning to get rid of the SHA1 certificate signing algorithm in our certificates and switch over to SHA-256. Problem is, that Windows XP (before SP3) is not supporting this. Therefore I need to ...
1
vote
2answers
88 views

Search for my web site returns HTTPS results

My home page is set to Google and Google adds ?gws_rd=ssl to it. When I type search term form my site into search box Google returns bunch of indexes (different pages within my site) that starts with ...
0
votes
1answer
61 views

Why does 301 redirect work for http but not for https?

Through my domain registrar I have set up a domain, essayme.co.uk, to automatically forward to https://google.com. If I go to http://essayme.co.uk it works as expected and redirects me to ...
3
votes
2answers
287 views

CA For A Large Intranet

I'm managing what has become a very large intranet (over 100 different hosts / services) and will be stepping down from my role in the near future. I want to make things easy for the next victim ...
3
votes
3answers
429 views

Is there a way to disallow crawling of only HTTPS in robots.txt?

I just realized that Bingbot is crawling my company's website's pages over https. Bing already crawls the site over http, so this seems frivolous. Is there a way to specify Disallow: / for https ...
3
votes
1answer
49 views

Nginx and Google Appengine Reverse Proxy Security

The scenario is that I have a Google compute node running Nginx as a reverse proxy to the google appengine. The appengine is used to service REST calls from an single page application (SPA). HTTPS ...
3
votes
1answer
111 views

SSL: What are the differences between Domain Validation and Extended Validation Certificates?

I can get Extended Validation for cheaper than Domain Validation, yearly. What are the differences between them?
1
vote
1answer
68 views

What's the catch with a 4.99$ ssl certificate

I was browsing the web in search of a cheap SSL certificate just for domain validation. Then I came across a site that sells a certificate for 5 year in a ridicules price of 4.99$ and the one year is ...
2
votes
1answer
55 views

SSL certificate that does not verify identity

(I'm fairly sure I know the answer, but just in case...) We want SSL on an internal-use webserver, but the usual ones don't work for the usual reasons (not static IP, subdomain issues etc.). Server ...
2
votes
1answer
28 views

Apache mod_rewrite SSL vs Non-SSL

I have my site setup with two conf files (one for SSL and one for Non-SSL ) The two confs are at this gist -> https://gist.github.com/akinsgre/9645179 The Non-SSL configuration works fine. When ...
2
votes
1answer
22 views

Plesk refuses to let me set a new SSL certificate

I got a problem when I try to update/change a SSL certificate on a PLESK managed server. One problem might be that I am not so confident at this topic. The setup is the following: I use an virtual ...
0
votes
1answer
35 views

Google Chrome issue with SSL

Using this code: RewriteEngine on RewriteCond %{HTTPS} off RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} My site goes to HTTPS if I type in www.domain.com. HOWEVER, only Google Chrome refuses ...
4
votes
1answer
75 views

How can I serve all resources under HTTPS instead of HTTP without changing their URLs in the HTML code

I know that by using an .htaccess file I can redirect everyone to https://. However, my SSL certificate complains if all the content isn't served under HTTPS. Is there a way to convert all the ...
5
votes
2answers
360 views

What is the easiest reliable way to host a HTTPS enabled static page on a domain I own

I'm looking for a simple & reliable way to host a HTTPS enabled static page on a domain I own. The fist thing that came to mind was S3 static website hosting but there seems to be no way to enable ...
0
votes
1answer
14 views

SSL not valid for domain

I am in the process of setting up a webmail server and one of the requirements is to have a signed SSL which I obtained through StartCom. During the setup it asked me to define a sub-domain name ...
2
votes
1answer
127 views

Does an SSL Certificate actually require a dedicated IP?

My web host which I have been with for at least going on 8 years now is requiring a dedicated IP address, which is $3.33/Month now for assigning a SSL Certificate with my web hosting package and ...
1
vote
1answer
74 views

Does the server type matter when purchasing an SSL certificate from Network Solutions for NodeJS?

I am running an instance of ExpressJS using NodeJS and wish to have it start using HTTPS. My company purchases SSL certificates through Network Solutions. When trying to give them my CSR, Network ...