Secure Sockets Layer (SSL) is a cryptographic protocol that provides communications security over the Internet.

learn more… | top users | synonyms (2)

4
votes
2answers
338 views

How to use the private and public keys?

I am new to ssl certificates, i wanted to learn about ssl certificates, and I generated private and public keys myself while logged into cpanel, I wonder how to use those and generate a secured ...
4
votes
1answer
169 views

“https://” refers to random site, “http://” is broken, but “http://www” works

I'm running a website which is acting extremely strange. At the time of writing, this link works: http://www.example.com This link doesn't: http://example.com But it does work if you copy/paste it ...
4
votes
2answers
330 views

Google suddenly only indexes https and not http

So all of a sudden, searches for our site "radiotuna" give out the result as an HTTPS link. ...
4
votes
3answers
2k views

Will a simple domain validated SSL certificate show a 'green lock'?

I'm looking into buying an SSL certificate for my domain. I'm considering buying: https://www.ssl.nu/en/products/regular+ssl/ssl+basic/ which is just a domain validation certificate I think. Will ...
4
votes
1answer
120 views

Locate sitemap at HTTP or HTTPS?

Our homepage has a 301 redirect from HTTP to HTTPS but all other pages on the site are on HTTP. (1) Should the sitemap be located at HTTPS and is there any problem if we: (2) include the HTTPS ...
4
votes
2answers
1k views

running multiple name-based web applications on a single ip address with SSL

I'm working on web projects. My scenario is I have two web applications running on one single web server (Apache). Due to my company policy, they ask me to put both of them on SSL (Port #443), no ...
4
votes
1answer
5k views

How to install mod_ssl for Apache

I have installed Apache httpd a while ago and have recently come back to it to try setup SSL and get it serving several different tomcat servers. At the moment I have two completely separate tomcat ...
4
votes
1answer
331 views

2048 bit SSL overhead [closed]

Can you guys help me learn some ssl networking basics plz? What is a SSL transaction (a full handshake?) Why do people think 2k ssl will melt netscalers (ssl trans/sec exceed netscaler max ssl ...
4
votes
2answers
9k views

Redirect Permanent and https

I just set up HTTPS on my server, and I have an issue with redirect permanent. Example http://domain.com/index.html it redirect me to http://www.domain.comindex.html The / (tail ending slash) is ...
4
votes
1answer
7k views

Properly force SSL with .htaccess, no double authentication

I'm trying to force SSL with .htaccess on a shared host. This means there I only have access to .htaccess and not the vhosts config. I know you can put a rule in the VirtualHost config file to force ...
4
votes
2answers
587 views

Impact of migrating home page from HTTP to HTTPS on search results

I've had to change one of my site's home page to HTTPS from HTTP. I had plenty of links coming into the HTTP page and was performing well in Google against many of my targeted search phrases. I did a ...
4
votes
2answers
643 views

Is it possible to share SSL certificates across servers?

We have a web application we will be launching soonish and for right now we just have one SSL/HTTPS certificate. We have this one certificate shared across 3 servers(in a cluster for load balancing) ...
4
votes
2answers
257 views

Google Analytics HTTP vs HTTPS

I want to use Google Analytics on a website that uses both HTTP and HTTPS that works as explained below: Secure pages accessed through https://mydomain.com/secure/* are always on HTTPS. Any access ...
4
votes
1answer
210 views

How to track HTTP and HTTPS from the same Google Analytics account?

I have a website with tutorials and a discuss forum. The website load on http protocol and the forum load with https for security reasons. For both of them I run the default Google Analytics code, but ...
4
votes
1answer
190 views

Redirect non-www to www while preserving protocol

I am aware of the fact that there are tons of questions in this section and in server fault dealing with re-directions from non-www to www URLs. But I couldn't find one dealing with this issue while ...
4
votes
1answer
338 views

https & ajax crawling

We made on our webpage https://www.1point618.com a transition to ssl and now we using nearly entirely ajax to load the content. Therefore all urls of existing pages have changed. We used the 301 ...
4
votes
3answers
108 views

What is SSL Hosting and what are the requirements for making secure transaction

I am here in order to collect the information for making secure online transaction. My client has got a online shopping site. We are now having cart in our own site and transfering the cart detail to ...
3
votes
2answers
318 views

The same user from different IP-addresses?

Has anybody encountered the situation when the same user from the same session ID and the same browser requested 2 different scripts on the same webserver inside the duration of 30 sec from two ...
3
votes
3answers
45 views

HTTPS and HTTP URLs point to different places?

I own and use a domain for a project. When I type in my domain preceeded by HTTPS instead of HTTP, I am re-directed to a compromising website. How is this possible? Did somebody buy the HTTPS ...
3
votes
2answers
107 views

EV SSL with a static resource server

We have the domain: www.scirra.com Which we are going through the process of obtaining an EV SSL certificate for. The site makes use of our static domain to server CSS/images etc. It has 4 ...
3
votes
4answers
6k views

How can I pass referrer header from my https domain to http domains?

My website is 100% https. I have links to other http domains. The referrer header is not set when linking from a https page to a http page. From http://en.wikipedia.org/wiki/HTTP_referrer If a ...
3
votes
4answers
3k views

How can I set the default page for an https request?

We have a website which has a Virtual Directory containing the secure portion of the website. If users come to http://www.mydomain.com, they should get directed to default.aspx of the main site, but ...
3
votes
3answers
1k views

Do internal intranet websites need to be secure?

The question is in the title. Does an internal site need to have https security? For example we have an internal site that handles our client's license keys -- do we need for that to be secure since ...
3
votes
2answers
2k views

How can my organization become a Root CA?

I'm the founder of a little non-profit French organization. Currently, we're providing free web and shell hosting. Is there a way to become a Trusted Certificate Authority, in order to give free SSL ...
3
votes
1answer
271 views

How to add lock symbol to my website using private SSL in https pages

I just purchased SSL for my website from hostgator, so that I can add lock symbol in my website, when users visit https://www.mysite.com For example: Now they have installed the certificate, but ...
3
votes
3answers
599 views

Need a CDN with SSL [closed]

We currently use Edgecast through Speedyrails. Back when I did my research they were both fast and very cost-effective. I haven't looked in a while, but now we need SSL on our assets as well. I ...
3
votes
5answers
1k views

What is the best kind of checkout system for a website?

I have worked with quite a few checkout systems and eCommerce platforms. Are there certain kinds of interfaces that convert sales better than others? For me there are really only two questions: ...
3
votes
1answer
735 views

Does MSIE recognise StartCom as an SSL Certificate Authority?

Ok, so I'm thinking about getting in on the SSL action, so that my sites can be secure etc, and after hours of shopping for the best priced certificate, I find out that StartSSL offer a free one. One ...
3
votes
1answer
2k views

How can I set Webmaster Tools to “Fetch as Google Bot” using SSL?

I have page which requires SSL so the page is https://. I want to fetch this page as google bot inside of google webmasters' diagnostic tools however Google, from what I can tell, only allows http ...
3
votes
3answers
653 views

Windows equivalent of localtunnel

Does anyone know of a Windows equivalent of localtunnel?
3
votes
4answers
2k views

Firefox reports HTTPS page to contain non-secure elements

When I visit our web site pages with IE over HTTPS, it reports the web site as protected (i.e. no elements are taken using HTTP). The same page, when loaded to Firefox, causes Firefox to complain that ...
3
votes
1answer
122 views

Which is more supported by web clients (browsers): SAN (Subject Alternative Name) or Wildcard SSL Certificates?

Which are more widely supported by browser clients, wildcard or SAN certificates? I need to decide between using a SAN cert or a wildcard cert. Client/browser compatibility is my biggest concern.
3
votes
1answer
67 views

Ensuring secure downloads for IIS

One of my customers wants to make sure that when someone downloads a file from their website the file being downloaded is secure from third parties capturing the downloaded information. Their site is ...
3
votes
1answer
106 views

HTTPS connection treated differently across browsers

I am using an SSL certificate for a website and the server redirects all http connections to https (a conscious choice). A tool provided by the CA says that the certificate has been installed ...
3
votes
2answers
377 views

What will be the impact on SEO if we remove our SSL certificate (url become http instead of https)?

For some weird reason the content accessed though our domains is returned via SSL HTTPS on all domains pointing to the server. https://domain.com leads to our website, with a proper SSL certificate ...
3
votes
3answers
2k views

DNS configuration to force root domain to www

we have an app running on heroku. the dns setup is like this: A record for domain.com -> heroku front end ip addresses CNAME for www.domain.com -> specific host name for our app provided by heroku ...
3
votes
1answer
100 views

Do I need an SSL Certificate?

I'm thinking about building an app that lets users upload images to sites like Flickr. They would need to enter their password to do this. I would send the data through PHP, do I need to get a SSL ...
3
votes
1answer
238 views

Should every page on every site be behind SSL?

This question stemmed from a discussion here: Ad networks that will serve via https? My question to the OP was "is it necessary to have every page behind SSL?" Admittedly at the time of posting this ...
3
votes
2answers
275 views

CA For A Large Intranet

I'm managing what has become a very large intranet (over 100 different hosts / services) and will be stepping down from my role in the near future. I want to make things easy for the next victim ...
3
votes
1answer
74 views

What steps are required to enable SSL on Apache2 with Ubuntu?

I am developing a strategy game for web where there there will be a lot of client-server traffic for sending attacks, moves, etc. Right now I send messages from the client to the server via HTTP, and ...
3
votes
1answer
85 views

Multiple IP addresses for one SSL certificate

Is it possible to register an SSL Certificate for Multiple IP addresses? This is needed for one of my sites; which runs on two different servers with different IP addresses. One server is live; while ...
3
votes
1answer
91 views

SSL: What are the differences between Domain Validation and Extended Validation Certificates? [closed]

I can get Extended Validation for cheaper than Domain Validation, yearly. What are the differences between them?
3
votes
1answer
45 views

Google Analytics for sites with SSL protected sections

Google Analytics account creation interface asks whether the URL of the site starts with HTTP or HTTPS. However my site is SSL protected in its payment pages only. Is it possible to have GA cover ...
3
votes
1answer
55 views

SSL on site which asks API via HTTPS

For example I have a site site.com. It has its own http json api: api.site.com. API has authorisation and it runs under https. Now, I need to make visualization of some functionality of json api - so ...
3
votes
1answer
802 views

Enabling SSL on Apache2 causes address already in use error

My server works just fine on a normal Apache2 install. Now, I'm trying to install subversion on this server using a guide I found on the net called: Installation of Subversion on Ubuntu, with Apache, ...
3
votes
1answer
96 views

Using RegEx's in Multi-Channel Funnels in Google Analytics

For some reason, I can't get my multichannel funnel which utilizes RegEx's in the path steps to function -- it keeps coming back with no data. There are a few variables which may be holding things up, ...
3
votes
4answers
590 views

is RapidSSL wildcard cert supported by major browsers?

I'm thinking of buying a wildcard SSL cert from clickSSL : http://www.clickssl.com/rapidssl/rapidsslwildcard.aspx That would be a rapidssl certificate, and I was looking into my firefox options to ...
3
votes
1answer
376 views

SSL redirection

I want to redirect one of my domain hosted in a domain provider to a different server where I have a Tomcat based application installed. I have purchased SSL for the server with Tomcat installed. The ...
3
votes
1answer
63 views

Serving WordPress menu links in only HTTPS or HTTP depending on how it's accessed

I have a WordPress site which uses WordPress HTTPS to enable SSL when users access it via that protocol. However, currently the menu links point back to the HTTP version. I want users to be linked ...
3
votes
1answer
103 views

Domain changes required for SSL integration

Currently my site supports regular payment options (User is taken to Payment Gateway/PG website). Now I'm trying to implement "seamless" PG integration. I need SSL for this. I'm having a dedicated ...