Secure Sockets Layer (SSL) is a cryptographic protocol that provides communications security over the Internet.

learn more… | top users | synonyms (2)

0
votes
0answers
37 views

How to overcome duplicate content SEO impact when enforcing https (SSL) site wide on an existing site [duplicate]

We're about to move a large existing site to https (SSL). I was a little concerned after reading this thread. Has anyone else experienced a negative impact when transitioning from http to https? ...
1
vote
1answer
133 views

SSL works on https://dedicatedip but not https://domain

My SSL certificate works on my apache web server but only when I do https://Dedicated_vps_ip. When I do https://domain.com it just doesn't work. I've tried almost everything. What am I doing wrong? ...
1
vote
2answers
38 views

SSL issues on my website

I'm running a XenForo website and I am now getting SSL security issues. I'm not so experienced in SSL, so I'm hoping you guys can provide some clarity on them. I was thinking that they probably had ...
2
votes
0answers
113 views

IIS 7.5 and authenticating client certificates

I am trying to understand if the functionality I am seeing is how client certs and SSL is supposed to work, or if I've done something wrong. I have a site running under IIS 7.5 that is using a cert ...
0
votes
0answers
18 views

Should I use HTTPS for my WordPress blog? [duplicate]

In general I am aware of what SSL does and how, but I'm not exactly sure as to what's the accepted custom, i.e. whether I actually am supposed to use it for my blog. There will be no other users than ...
0
votes
1answer
34 views

Revoked certificate causes browser alerts to not trust website when accessed via SSL

I revoked the certificate for my website and now every time I navigate to its SSL version, e.g. https://example.com, I get an alert from all browsers that the site should not be trusted. How can ...
1
vote
1answer
54 views

Shared web hosting issue where Google is incorrectly indexing https content from another website

I am using shared hosting from a reasonably well known Australian web hosting company and have come across an unusual issue where Google is indexing pages on my website from another website on the ...
4
votes
1answer
187 views

Multiple IP addresses for one SSL certificate

Is it possible to register an SSL Certificate for Multiple IP addresses? This is needed for one of my sites; which runs on two different servers with different IP addresses. One server is live; while ...
4
votes
1answer
184 views

“https://” refers to random site, “http://” is broken, but “http://www” works

I'm running a website which is acting extremely strange. At the time of writing, this link works: http://www.example.com This link doesn't: http://example.com But it does work if you copy/paste it ...
4
votes
1answer
172 views

Locate sitemap at HTTP or HTTPS?

Our homepage has a 301 redirect from HTTP to HTTPS but all other pages on the site are on HTTP. (1) Should the sitemap be located at HTTPS and is there any problem if we: (2) include the HTTPS ...
1
vote
1answer
190 views

Where to place web.xml outside WAR file for secure redirect?

I am running Tomcat 7 and am deploying a bunch of applications delivered to me by a third party as WAR files. I'd like to force some of those apps to always use SSL. (All the "SSL" apps are in one ...
0
votes
1answer
77 views

Issue with redirecting an HTTP homepage to an HTTPS homepage

In July, we changed our homepage to HTTPS via a 301 redirect from HTTP (the only page on our site with HTTPS). Even though we have significantly increased backlinks to our homepage, we have had no ...
2
votes
1answer
397 views

Use SSL on Heroku without paying Heroku for SSL?

In this post, the author suggest a way to get SSL on Heroku without paying Heroku for it: Pay Cloudflare for premium service, and get SSL support with it. Create a CNAME in cloudflare that points to ...
2
votes
2answers
111 views

Will using HTTPS hurt my site's SEO or other statistics?

I've set up a WordPress blog. Since I have to log into it from many different locations/machines, I've also got an SSL certificate, and set up Apache to redirect HTTP to HTTPS. It all works, but I'm ...
2
votes
1answer
171 views

Will Googlebot crawl HTTPS URLs that are encrypted by SSL?

This question was asked at StackOverflow, but it doesn't have good references. Does Googlebot crawl HTTPS? (Please provide references.)
2
votes
1answer
69 views

Duplicate content caused by HTTPS pages

I have a landing page that can be called by HTTP and also by HTTPS. The canonical URL links to the HTTP version. In some comments I have read that the HTTPS version is never read by a Googlebot. Is ...
0
votes
2answers
42 views

SSL issue and redirects from https to http

I have a site www.example.com for which i purchased SSL cert and installed. And it was working fine, I also have a subdomain with app.example.com which was not on SSL. Both www.example.com and ...
0
votes
1answer
209 views

A POST request on a page with HTTPS is done automatically in HTTPS?

If I make a request to page.php (AJAX) with JavaScript from a HTTPS page, the request is automatically made ​​page.php directly with HTTPS or HTTP? If HTTP, how to send a request (to the same domain) ...
0
votes
0answers
12 views

How do I stop Google indexing my main page as https [duplicate]

Due to historic reasons, we have things set up so that "www.mydomain.com" redirects to "store.mydomain.com". This has worked perfectly fine until recently, when Google appears to be sending visitors ...
0
votes
0answers
18 views

Changing my site from HTTP to HTTPS - will google search results sort themselves out? [duplicate]

I've made all of my http pages 301 redirect to their https equivalents. I've also made sure that all of the URLs in my sitemap files are https. Lastly I created a new profile in GWTs under the https ...
0
votes
1answer
55 views

How can I stop my blog from trying to use SSL?

I noticed yesterday that my Avg Visit Duration for users on Androids plummeted on 13th September. So I looked into it and found that Android users were being sent a warning message when they tried to ...
2
votes
1answer
203 views

Why does navigating to http:// then redirect to https:// give mixed content warning?

If I directly navigate to https://scotthelme.co.uk I get a green TLS indicator in the address bar. If I navigate to http://scotthelme.com which issues a 301 to https://scotthelme.co.uk I get a mixed ...
3
votes
1answer
176 views

Which is more supported by web clients (browsers): SAN (Subject Alternative Name) or Wildcard SSL Certificates?

Which are more widely supported by browser clients, wildcard or SAN certificates? I need to decide between using a SAN cert or a wildcard cert. Client/browser compatibility is my biggest concern.
3
votes
1answer
68 views

Ensuring secure downloads for IIS

One of my customers wants to make sure that when someone downloads a file from their website the file being downloaded is secure from third parties capturing the downloaded information. Their site is ...
0
votes
2answers
72 views

Keep a Servlet/JSP web site always on SSL?

How to I keep a site always on SSL with padlock symbol always exists. Is there any way to optimize the page for SSL in JSP and Servlets ? Just tell about jsp and servlet optimization so answer do not ...
0
votes
0answers
12 views

Free Basic Hosting w SSL Certificate [duplicate]

I'm looking for a free hosting provider which provides an SSL Certificate at no additional charge. Does anyone know of a hosting provider which can provide such a service? Thanks in advance, Amani ...
0
votes
0answers
225 views

How to make a web service (.asmx) available to the public through IIS w/ SSL?

Situation: I have written a .asmx web service that I have gotten to work on GoDaddy, hosted in IIS. I now need to get this web service to be available to the public in IIS, but from our local web ...
1
vote
0answers
121 views

Does any SSL certificate authority handle third-level .name domains? [closed]

I am the owner of a third-level .name domain of form subdomain.example.name. The .name domain hierarchy is somewhat unusual in that generally one registers a third-level domain such as mine, rather ...
1
vote
1answer
58 views

Mixing self signed certs with traditional SSL

I have a traditional SSL cert going to a subdomain secure.mydomain.com on my domain. My host required me to have a dedicated IP in order to do this. I would also like to use HTTPS on my site for when ...
2
votes
3answers
113 views

Website doesn't default to HTTPS

I'm kinda new to this so bear with me. I just finished setting up SSL on my website. The problem is that if the user types www.mydomain.com into their browser, it doesn't connect securely with HTTPS. ...
4
votes
2answers
321 views

Google Analytics HTTP vs HTTPS

I want to use Google Analytics on a website that uses both HTTP and HTTPS that works as explained below: Secure pages accessed through https://mydomain.com/secure/* are always on HTTPS. Any access ...
2
votes
1answer
116 views

How can I make FTP connections secure in WHM?

For security reasons (since FTP transmits passwords and files in plain text), I want to force users of my shared hosting to use FTPS or SFTP instead of regular FTP. I am using WHM but have limited ...
3
votes
1answer
110 views

SSL: What are the differences between Domain Validation and Extended Validation Certificates?

I can get Extended Validation for cheaper than Domain Validation, yearly. What are the differences between them?
2
votes
1answer
106 views

Google is not seeing my HTTPS website

I have a website and it is working with HTTPS, programatically when someone got to HTTP it forward him to the HTTPS version. My issue that I see that Google Search is not seeing my pages, the website ...
0
votes
1answer
34 views

What folder should I apply SSL certificate to?

Is an SSL cert applied to a specific folder or also all subfolders of that folder? If the SSL is applied to the root, will it be applied to all sub-folders? If so why would I not always apply to ...
2
votes
2answers
84 views

How can I prevent HTTPS on another domain from wrongly showing on my HTTP-only domain?

So, I have a blog at domain.com. This blog is HTTP-only because I would gain almost nothing from adding SSL support. I have a web service now that I want to enable SSL support on that runs on the same ...
1
vote
1answer
84 views

Is a security seal or EV SLL more important?

Does anybody know of a survey or study that compares site visitor attitudes/perceptions to security between an EV SSL cert and a security seal? The EV SSL cert will show up green in the URL (like a ...
1
vote
1answer
730 views

HTTP/HTTPS duplicate content 301 vs canonical

I thought I would ask a question as the amount of different sources that say this is right or that isn't right is unbelievable. Let me tell you my situation, at the moment, my boss wanted me to add ...
1
vote
3answers
470 views

URL without trailing slash makes Apache look in non-SSL DocumentRoot

I have configured a virtual host in Apache for serving content over SSL/TLS. Since I also want to allow other sites on my domain to use regular http, I have two document roots, one at /home/www/html ...
-2
votes
1answer
794 views

https and Google Search: how to run an https web-site to get Referer?

I note that www.google.com is increasingly being used through https, and this results in no HTTP Referer being provided to my web-sites for hits that originate from Google Search over SSL. How do I ...
0
votes
1answer
252 views

Apache is redirecting all https requests to one vhost

Apache novice here, We run a server with a few dozen vhosted sites, under apache 2.2.22 on ubuntu 12.0.4. None of them had a SSL before. We had a client request one the other day, and shortly after ...
5
votes
2answers
339 views

What is the easiest reliable way to host a HTTPS enabled static page on a domain I own

I'm looking for a simple & reliable way to host a HTTPS enabled static page on a domain I own. The fist thing that came to mind was S3 static website hosting but there seems to be no way to enable ...
1
vote
2answers
544 views

Automatic redirection from http to https with .htaccess authentication in virtual hosting

Hi I have configured Virtual host on apache with .htaccess authentication with SSL. It's working fine when I typed url https://www.example.com:9004/test.php but when I typed ...
0
votes
1answer
47 views

Microsoft update site has no SSL

We need to put a link to Microsoft update site. But we come from SSL and Microsoft has no SSL activated for their update site. Is there any common workaround?
1
vote
0answers
186 views

How can I set a secure flag on cookies generated from a Python application?

I have an application written in Python running behind Apache and SSL. I am not seeing a secure flag on my cookie: apache Server version: Apache/2.2.15 (Unix) I have added a configuration line to my ...
4
votes
1answer
282 views

How to track HTTP and HTTPS from the same Google Analytics account?

I have a website with tutorials and a discuss forum. The website load on http protocol and the forum load with https for security reasons. For both of them I run the default Google Analytics code, but ...
3
votes
1answer
116 views

HTTPS connection treated differently across browsers

I am using an SSL certificate for a website and the server redirects all http connections to https (a conscious choice). A tool provided by the CA says that the certificate has been installed ...
1
vote
1answer
301 views

Internet Explorer receives 403 Error when viewing dev environment SSL test certificate (using MAMP)

I've been developing a site with MAMP which has a handy way of generating (obviously) unverified SSL certificates for testing purposes. All was well when testing with Chrome, Firefox, Safari you ...
1
vote
0answers
130 views

Virtualmin: https domain showing up for all other domains that have ssl disabled

My Virtualmin has a domain with an SSL cert enabled. All domains are on the same IP. The other domains have SSL disabled, and the problem is that if I request a https page for these domains they ...
61
votes
4answers
8k views

How do I transition to SSL without affecting PageRank?

Here at Stack Exchange we're working on moving all traffic to SSL. The reason we're not doing logged-in-users only is that one side of the login divide would suffer a redirect from Google every time. ...