Secure Sockets Layer (SSL) is a cryptographic protocol that provides communications security over the Internet.

learn more… | top users | synonyms (2)

5
votes
1answer
1k views

Redirect from SSL HTTPS to HTTP (NO SSL)

Many of my visitors have bookmarked my site already with https://mydomain.com. Under the bad advice of a programmer I have put my whole site (Joomla) using SSL. I do not sell anything or provide any ...
5
votes
2answers
10k views

Redirect Permanent and https

I just set up HTTPS on my server, and I have an issue with redirect permanent. Example http://domain.com/index.html it redirect me to http://www.domain.comindex.html The / (tail ending slash) is ...
5
votes
1answer
2k views

Can I expect browsers to cache static content served over SSL encryption?

With all the talk about FireSheep I am thinking of switching my web applications to use full https accross the entire site. However, I am concerned about caching. I use a lot of JavaScript, CSS files, ...
5
votes
2answers
359 views

What is the easiest reliable way to host a HTTPS enabled static page on a domain I own

I'm looking for a simple & reliable way to host a HTTPS enabled static page on a domain I own. The fist thing that came to mind was S3 static website hosting but there seems to be no way to enable ...
4
votes
4answers
727 views

SSL and green address bar

I am new to SSL so can someone explain why my address bar turns green when I'm on certain sites beginning with https:// and sometimes it doesn't even though I know the site has SSL? Maybe these two ...
4
votes
4answers
8k views

How can I pass referrer header from my https domain to http domains?

My website is 100% https. I have links to other http domains. The referrer header is not set when linking from a https page to a http page. From http://en.wikipedia.org/wiki/HTTP_referrer If a ...
4
votes
1answer
95 views

What makes a SSL certificate “signed”?

When you buy a SSL certificate from Comodo, it is signed by Comodo and therefore trusted. How is it signed though? Why can't anyone sign the certificate pretending to be Comodo?
4
votes
1answer
75 views

How can I serve all resources under HTTPS instead of HTTP without changing their URLs in the HTML code

I know that by using an .htaccess file I can redirect everyone to https://. However, my SSL certificate complains if all the content isn't served under HTTPS. Is there a way to convert all the ...
4
votes
2answers
359 views

How to use the private and public keys?

I am new to ssl certificates, i wanted to learn about ssl certificates, and I generated private and public keys myself while logged into cpanel, I wonder how to use those and generate a secured ...
4
votes
1answer
184 views

“https://” refers to random site, “http://” is broken, but “http://www” works

I'm running a website which is acting extremely strange. At the time of writing, this link works: http://www.example.com This link doesn't: http://example.com But it does work if you copy/paste it ...
4
votes
2answers
358 views

Google suddenly only indexes https and not http

So all of a sudden, searches for our site "radiotuna" give out the result as an HTTPS link. ...
4
votes
3answers
3k views

Will a simple domain validated SSL certificate show a 'green lock'?

I'm looking into buying an SSL certificate for my domain. I'm considering buying: https://www.ssl.nu/en/products/regular+ssl/ssl+basic/ which is just a domain validation certificate I think. Will ...
4
votes
1answer
192 views

Locate sitemap at HTTP or HTTPS?

Our homepage has a 301 redirect from HTTP to HTTPS but all other pages on the site are on HTTP. (1) Should the sitemap be located at HTTPS and is there any problem if we: (2) include the HTTPS ...
4
votes
2answers
1k views

running multiple name-based web applications on a single ip address with SSL

I'm working on web projects. My scenario is I have two web applications running on one single web server (Apache). Due to my company policy, they ask me to put both of them on SSL (Port #443), no ...
4
votes
1answer
237 views

Multiple IP addresses for one SSL certificate

Is it possible to register an SSL Certificate for Multiple IP addresses? This is needed for one of my sites; which runs on two different servers with different IP addresses. One server is live; while ...
4
votes
1answer
342 views

2048 bit SSL overhead [closed]

Can you guys help me learn some ssl networking basics plz? What is a SSL transaction (a full handshake?) Why do people think 2k ssl will melt netscalers (ssl trans/sec exceed netscaler max ssl ...
4
votes
1answer
7k views

Properly force SSL with .htaccess, no double authentication

I'm trying to force SSL with .htaccess on a shared host. This means there I only have access to .htaccess and not the vhosts config. I know you can put a rule in the VirtualHost config file to force ...
4
votes
2answers
689 views

Impact of migrating home page from HTTP to HTTPS on search results

I've had to change one of my site's home page to HTTPS from HTTP. I had plenty of links coming into the HTTP page and was performing well in Google against many of my targeted search phrases. I did a ...
4
votes
2answers
772 views

Is it possible to share SSL certificates across servers?

We have a web application we will be launching soonish and for right now we just have one SSL/HTTPS certificate. We have this one certificate shared across 3 servers(in a cluster for load balancing) ...
4
votes
2answers
345 views

Google Analytics HTTP vs HTTPS

I want to use Google Analytics on a website that uses both HTTP and HTTPS that works as explained below: Secure pages accessed through https://mydomain.com/secure/* are always on HTTPS. Any access ...
4
votes
1answer
293 views

How to track HTTP and HTTPS from the same Google Analytics account?

I have a website with tutorials and a discuss forum. The website load on http protocol and the forum load with https for security reasons. For both of them I run the default Google Analytics code, but ...
4
votes
1answer
214 views

Redirect non-www to www while preserving protocol

I am aware of the fact that there are tons of questions in this section and in server fault dealing with re-directions from non-www to www URLs. But I couldn't find one dealing with this issue while ...
4
votes
1answer
341 views

https & ajax crawling

We made on our webpage https://www.1point618.com a transition to ssl and now we using nearly entirely ajax to load the content. Therefore all urls of existing pages have changed. We used the 301 ...
4
votes
1answer
92 views

Serving WordPress menu links in only HTTPS or HTTP depending on how it's accessed

I have a WordPress site which uses WordPress HTTPS to enable SSL when users access it via that protocol. However, currently the menu links point back to the HTTP version. I want users to be linked ...
4
votes
3answers
108 views

What is SSL Hosting and what are the requirements for making secure transaction

I am here in order to collect the information for making secure online transaction. My client has got a online shopping site. We are now having cart in our own site and transfering the cart detail to ...
3
votes
2answers
322 views

The same user from different IP-addresses?

Has anybody encountered the situation when the same user from the same session ID and the same browser requested 2 different scripts on the same webserver inside the duration of 30 sec from two ...
3
votes
2answers
215 views

Will canonical tag referencing unsecure HTTP URLs on a HTTPS page cause the unsecure message?

If a secure HTTPS page has a canonical tag referencing the HTTP version, will this cause the message in the browser that the page is using unsecure elements and prevent the green lock icon appearing? ...
3
votes
3answers
428 views

Is there a way to disallow crawling of only HTTPS in robots.txt?

I just realized that Bingbot is crawling my company's website's pages over https. Bing already crawls the site over http, so this seems frivolous. Is there a way to specify Disallow: / for https ...
3
votes
2answers
112 views

EV SSL with a static resource server

We have the domain: www.scirra.com Which we are going through the process of obtaining an EV SSL certificate for. The site makes use of our static domain to server CSS/images etc. It has 4 ...
3
votes
3answers
52 views

HTTPS and HTTP URLs point to different places?

I own and use a domain for a project. When I type in my domain preceeded by HTTPS instead of HTTP, I am re-directed to a compromising website. How is this possible? Did somebody buy the HTTPS ...
3
votes
4answers
3k views

How can I set the default page for an https request?

We have a website which has a Virtual Directory containing the secure portion of the website. If users come to http://www.mydomain.com, they should get directed to default.aspx of the main site, but ...
3
votes
3answers
2k views

Do internal intranet websites need to be secure?

The question is in the title. Does an internal site need to have https security? For example we have an internal site that handles our client's license keys -- do we need for that to be secure since ...
3
votes
1answer
716 views

SSL between customer's domain having CNAME to our secured server?

We're setting up a payment service -- a few pages to collect credit cards, and do other stuff that needs to be secure. We would like to offer the service to customers via a cobranded page we serve ...
3
votes
2answers
3k views

How can my organization become a Root CA?

I'm the founder of a little non-profit French organization. Currently, we're providing free web and shell hosting. Is there a way to become a Trusted Certificate Authority, in order to give free SSL ...
3
votes
1answer
302 views

How to add lock symbol to my website using private SSL in https pages

I just purchased SSL for my website from hostgator, so that I can add lock symbol in my website, when users visit https://www.mysite.com For example: Now they have installed the certificate, but ...
3
votes
3answers
708 views

Need a CDN with SSL [closed]

We currently use Edgecast through Speedyrails. Back when I did my research they were both fast and very cost-effective. I haven't looked in a while, but now we need SSL on our assets as well. I ...
3
votes
5answers
1k views

What is the best kind of checkout system for a website?

I have worked with quite a few checkout systems and eCommerce platforms. Are there certain kinds of interfaces that convert sales better than others? For me there are really only two questions: ...
3
votes
1answer
190 views

Which is more supported by web clients (browsers): SAN (Subject Alternative Name) or Wildcard SSL Certificates?

Which are more widely supported by browser clients, wildcard or SAN certificates? I need to decide between using a SAN cert or a wildcard cert. Client/browser compatibility is my biggest concern.
3
votes
1answer
801 views

Does MSIE recognise StartCom as an SSL Certificate Authority?

Ok, so I'm thinking about getting in on the SSL action, so that my sites can be secure etc, and after hours of shopping for the best priced certificate, I find out that StartSSL offer a free one. One ...
3
votes
3answers
669 views

Windows equivalent of localtunnel

Does anyone know of a Windows equivalent of localtunnel?
3
votes
4answers
2k views

Firefox reports HTTPS page to contain non-secure elements

When I visit our web site pages with IE over HTTPS, it reports the web site as protected (i.e. no elements are taken using HTTP). The same page, when loaded to Firefox, causes Firefox to complain that ...
3
votes
1answer
68 views

Ensuring secure downloads for IIS

One of my customers wants to make sure that when someone downloads a file from their website the file being downloaded is secure from third parties capturing the downloaded information. Their site is ...
3
votes
1answer
119 views

HTTPS connection treated differently across browsers

I am using an SSL certificate for a website and the server redirects all http connections to https (a conscious choice). A tool provided by the CA says that the certificate has been installed ...
3
votes
2answers
404 views

What will be the impact on SEO if we remove our SSL certificate (url become http instead of https)?

For some weird reason the content accessed though our domains is returned via SSL HTTPS on all domains pointing to the server. https://domain.com leads to our website, with a proper SSL certificate ...
3
votes
3answers
2k views

DNS configuration to force root domain to www

we have an app running on heroku. the dns setup is like this: A record for domain.com -> heroku front end ip addresses CNAME for www.domain.com -> specific host name for our app provided by heroku ...
3
votes
1answer
102 views

Do I need an SSL Certificate?

I'm thinking about building an app that lets users upload images to sites like Flickr. They would need to enter their password to do this. I would send the data through PHP, do I need to get a SSL ...
3
votes
1answer
240 views

Should every page on every site be behind SSL?

This question stemmed from a discussion here: Ad networks that will serve via https? My question to the OP was "is it necessary to have every page behind SSL?" Admittedly at the time of posting this ...
3
votes
2answers
286 views

CA For A Large Intranet

I'm managing what has become a very large intranet (over 100 different hosts / services) and will be stepping down from my role in the near future. I want to make things easy for the next victim ...
3
votes
1answer
147 views

What steps are required to enable SSL on Apache2 with Ubuntu?

I am developing a strategy game for web where there there will be a lot of client-server traffic for sending attacks, moves, etc. Right now I send messages from the client to the server via HTTP, and ...
3
votes
1answer
111 views

SSL: What are the differences between Domain Validation and Extended Validation Certificates?

I can get Extended Validation for cheaper than Domain Validation, yearly. What are the differences between them?