Secure Sockets Layer (SSL) is a cryptographic protocol that provides communications security over the Internet.

learn more… | top users | synonyms (2)

1
vote
1answer
26 views

Get cipher used for HTTPS with nginx

Background I would like to run several Tornado instances with nginx as a load balancer and static file server. Since both are to be running on the same machine (or atleast the same, private network) ...
6
votes
3answers
91 views

Does Googlebot support TLS v1.2? If not, what will my TLS v1.2-only site look like to it?

I currently redirect all non-HTTPS connections to HTTPS, and support TLS v1, TLS v1.1, and TLS v1.2. I reconfigured my testing server to accept only a very limited and secure cipher suite and TLSv1.2 ...
1
vote
1answer
28 views

protocol relative URLs from other domains

If I am configuring https://foo.mysite.com where I have an SSL cert with CN=foo.mysite.com, but index.html has includes/images/etc loading from http://othersite.com/cat.png and ...
2
votes
1answer
113 views

SSL not working on home page

Recently set up a server for a client and installed a Comodo Positive SSL certificate. In firefox everywhere on the website I can see the padlock icon which shows the Comodo verification, except the ...
1
vote
0answers
52 views

Are there any usable free options for SSL certificates? [closed]

I'm aware that there are old questions in the same vein, but they're from ~2010 and everything has moved on a lot since then. Also, a caveat below excludes the common old answer. Background: I've got ...
3
votes
2answers
94 views

cPanel SSL installation

I've tried transferring SSL issued by GoDaddy to Linux based server. The website was originally hosted in Windows. After the installation is completed, I got a message like this in cPanel: ...
1
vote
0answers
107 views

Migrate a ASP.NET web service from http to https. How to create a SSL certificate that works in test environment on IIS 7.5?

I have a question regarding a web service, http and https. First of all, there is a quite similar question with an accepted answer on StackOverflow. Like the questioner on SO, I have a simple working ...
3
votes
3answers
52 views

HTTPS and HTTP URLs point to different places?

I own and use a domain for a project. When I type in my domain preceeded by HTTPS instead of HTTP, I am re-directed to a compromising website. How is this possible? Did somebody buy the HTTPS ...
2
votes
0answers
17 views

Measuring percentage of visitors connecting over https [duplicate]

Does Google Analytics expose information about the connection protocol used by site visitors? I don't see any option in the customization section... is this something I'd have to use a custom variable ...
1
vote
1answer
73 views

Non HTTPS site is indexed as HTTPS in Google Search

I have hosted a site over shared hosting (ipage) and not have setup SSL certificate (which I don't need), but some how Google have indexed it as HTTPS link which popup security error on opening it. ...
1
vote
2answers
27 views

eCommerce checkout security

I'm developing an eCommerce site and using SagePay as a card processor. Customers will enter their delivery/invoice details into a form which is then submitted to a checkout page. This page encrypts ...
14
votes
5answers
553 views

Force Using SSL on Site now?

I am starting to see a majority of websites starting to use SSL as a standard practice for viewing the website securely now thanks to the revelations of Edward Snowden about the NSA surveillance that ...
0
votes
0answers
70 views

HTTPS redirect to HTTP not working with 'www' subdomain

I have 2 rules on my site: one to force the www subdomain, and another to force the HTTP protocol: RewriteEngine On RewriteBase / RewriteCond %{HTTPS} =on RewriteRule ^ ...
2
votes
1answer
30 views

Apache mod_rewrite SSL vs Non-SSL

I have my site setup with two conf files (one for SSL and one for Non-SSL ) The two confs are at this gist -> https://gist.github.com/akinsgre/9645179 The Non-SSL configuration works fine. When ...
0
votes
0answers
80 views

HTTPS connections for Revive (formely Openx)

I have installed Revive Adserver 3.0.2 (formely Openx Adserver) and everything works fine. But, only if my website its accessed using standard conexion (http). If my website its accessed usin https ...
3
votes
2answers
85 views

Any reason not to buy SSL certificates from a reseller?

Is there any reason to buy an SSL certificate directly from the host (for $49, for example), instead of through a well-known reseller, for only $10.95? Specifically in my case, I just need to ...
1
vote
1answer
79 views

Does the server type matter when purchasing an SSL certificate from Network Solutions for NodeJS?

I am running an instance of ExpressJS using NodeJS and wish to have it start using HTTPS. My company purchases SSL certificates through Network Solutions. When trying to give them my CSR, Network ...
2
votes
1answer
39 views

Can I get source URL from Google search if I switch to HTTPS myself?

HTTPS cloaks the keywords, but I've read that by enabling HTTPS on my site I may at least get the source URL's - if the browser goes from HTTPS -> HTTPS it does not drop the source url in the packet ...
3
votes
1answer
189 views

What steps are required to enable SSL on Apache2 with Ubuntu?

I am developing a strategy game for web where there there will be a lot of client-server traffic for sending attacks, moves, etc. Right now I send messages from the client to the server via HTTP, and ...
0
votes
1answer
37 views

Setting up WordPress protocol using Softaculous & Namecheap

I am setting up WordPress on my new Namecheap domain/hosting account and the site I am building will eventually be offering items for sale (a small personal business site selling vintage items). I'm ...
6
votes
1answer
96 views

If a website is accessed on HTTPS instead of HTTP, should the URLs on the sitemap be HTTPS or HTTP?

I have changed my website from HTTP to HTTPS. At this moment, I have the next rewrite rule working to redirect calls for HTTP to HTTPS: RewriteEngine On RewriteCond %{SERVER_PORT} 80 RewriteRule ...
1
vote
2answers
145 views

Finding different Windows XP Service Packs via User-Agent string

I am planning to get rid of the SHA1 certificate signing algorithm in our certificates and switch over to SHA-256. Problem is, that Windows XP (before SP3) is not supporting this. Therefore I need to ...
4
votes
1answer
101 views

Serving WordPress menu links in only HTTPS or HTTP depending on how it's accessed

I have a WordPress site which uses WordPress HTTPS to enable SSL when users access it via that protocol. However, currently the menu links point back to the HTTP version. I want users to be linked ...
2
votes
1answer
99 views

Intermittent SSL errors

I have a Facebook app hosted on SSL. Some people get "Connection not trusted" when using the app. I do not get the error. I have switched between secure browsing and not using Facebook settings, and ...
2
votes
3answers
92 views

Would a self-signed certificate impact my site for search engines?

Would a self-signed certificate impact my site for search engines? By that I mean, do robots refuse to index sites with self-signed certificates?
1
vote
1answer
51 views

Why do CDNs charge so much for private SSL? [closed]

I've been looking at various CDN services, and many of them seem to charge a pretty hefty fee compared to the free shared SSL offering. One in particular, CDN77, is offering private SSL for $700/year. ...
0
votes
0answers
44 views

How to overcome duplicate content SEO impact when enforcing https (SSL) site wide on an existing site [duplicate]

We're about to move a large existing site to https (SSL). I was a little concerned after reading this thread. Has anyone else experienced a negative impact when transitioning from http to https? ...
1
vote
1answer
140 views

SSL works on https://dedicatedip but not https://domain

My SSL certificate works on my apache web server but only when I do https://Dedicated_vps_ip. When I do https://domain.com it just doesn't work. I've tried almost everything. What am I doing wrong? ...
1
vote
2answers
41 views

SSL issues on my website

I'm running a XenForo website and I am now getting SSL security issues. I'm not so experienced in SSL, so I'm hoping you guys can provide some clarity on them. I was thinking that they probably had ...
2
votes
0answers
116 views

IIS 7.5 and authenticating client certificates

I am trying to understand if the functionality I am seeing is how client certs and SSL is supposed to work, or if I've done something wrong. I have a site running under IIS 7.5 that is using a cert ...
0
votes
0answers
18 views

Should I use HTTPS for my WordPress blog? [duplicate]

In general I am aware of what SSL does and how, but I'm not exactly sure as to what's the accepted custom, i.e. whether I actually am supposed to use it for my blog. There will be no other users than ...
0
votes
1answer
37 views

Revoked certificate causes browser alerts to not trust website when accessed via SSL

I revoked the certificate for my website and now every time I navigate to its SSL version, e.g. https://example.com, I get an alert from all browsers that the site should not be trusted. How can ...
1
vote
1answer
60 views

Shared web hosting issue where Google is incorrectly indexing https content from another website

I am using shared hosting from a reasonably well known Australian web hosting company and have come across an unusual issue where Google is indexing pages on my website from another website on the ...
4
votes
1answer
336 views

Multiple IP addresses for one SSL certificate

Is it possible to register an SSL Certificate for Multiple IP addresses? This is needed for one of my sites; which runs on two different servers with different IP addresses. One server is live; while ...
4
votes
1answer
187 views

“https://” refers to random site, “http://” is broken, but “http://www” works

I'm running a website which is acting extremely strange. At the time of writing, this link works: http://www.example.com This link doesn't: http://example.com But it does work if you copy/paste it ...
4
votes
1answer
223 views

Locate sitemap at HTTP or HTTPS?

Our homepage has a 301 redirect from HTTP to HTTPS but all other pages on the site are on HTTP. (1) Should the sitemap be located at HTTPS and is there any problem if we: (2) include the HTTPS ...
1
vote
1answer
213 views

Where to place web.xml outside WAR file for secure redirect?

I am running Tomcat 7 and am deploying a bunch of applications delivered to me by a third party as WAR files. I'd like to force some of those apps to always use SSL. (All the "SSL" apps are in one ...
0
votes
1answer
77 views

Issue with redirecting an HTTP homepage to an HTTPS homepage

In July, we changed our homepage to HTTPS via a 301 redirect from HTTP (the only page on our site with HTTPS). Even though we have significantly increased backlinks to our homepage, we have had no ...
2
votes
1answer
474 views

Use SSL on Heroku without paying Heroku for SSL?

In this post, the author suggest a way to get SSL on Heroku without paying Heroku for it: Pay Cloudflare for premium service, and get SSL support with it. Create a CNAME in cloudflare that points to ...
2
votes
2answers
130 views

Will using HTTPS hurt my site's SEO or other statistics?

I've set up a WordPress blog. Since I have to log into it from many different locations/machines, I've also got an SSL certificate, and set up Apache to redirect HTTP to HTTPS. It all works, but I'm ...
2
votes
1answer
217 views

Will Googlebot crawl HTTPS URLs that are encrypted by SSL?

This question was asked at StackOverflow, but it doesn't have good references. Does Googlebot crawl HTTPS? (Please provide references.)
2
votes
1answer
72 views

Duplicate content caused by HTTPS pages

I have a landing page that can be called by HTTP and also by HTTPS. The canonical URL links to the HTTP version. In some comments I have read that the HTTPS version is never read by a Googlebot. Is ...
0
votes
2answers
46 views

SSL issue and redirects from https to http

I have a site www.example.com for which i purchased SSL cert and installed. And it was working fine, I also have a subdomain with app.example.com which was not on SSL. Both www.example.com and ...
0
votes
1answer
237 views

A POST request on a page with HTTPS is done automatically in HTTPS?

If I make a request to page.php (AJAX) with JavaScript from a HTTPS page, the request is automatically made ​​page.php directly with HTTPS or HTTP? If HTTP, how to send a request (to the same domain) ...
0
votes
0answers
12 views

How do I stop Google indexing my main page as https [duplicate]

Due to historic reasons, we have things set up so that "www.mydomain.com" redirects to "store.mydomain.com". This has worked perfectly fine until recently, when Google appears to be sending visitors ...
0
votes
0answers
21 views

Changing my site from HTTP to HTTPS - will google search results sort themselves out? [duplicate]

I've made all of my http pages 301 redirect to their https equivalents. I've also made sure that all of the URLs in my sitemap files are https. Lastly I created a new profile in GWTs under the https ...
0
votes
1answer
55 views

How can I stop my blog from trying to use SSL?

I noticed yesterday that my Avg Visit Duration for users on Androids plummeted on 13th September. So I looked into it and found that Android users were being sent a warning message when they tried to ...
2
votes
1answer
215 views

Why does navigating to http:// then redirect to https:// give mixed content warning?

If I directly navigate to https://scotthelme.co.uk I get a green TLS indicator in the address bar. If I navigate to http://scotthelme.com which issues a 301 to https://scotthelme.co.uk I get a mixed ...
3
votes
1answer
211 views

Which is more supported by web clients (browsers): SAN (Subject Alternative Name) or Wildcard SSL Certificates?

Which are more widely supported by browser clients, wildcard or SAN certificates? I need to decide between using a SAN cert or a wildcard cert. Client/browser compatibility is my biggest concern.
3
votes
1answer
68 views

Ensuring secure downloads for IIS

One of my customers wants to make sure that when someone downloads a file from their website the file being downloaded is secure from third parties capturing the downloaded information. Their site is ...