Secure Sockets Layer (SSL) is a cryptographic protocol that provides communications security over the Internet.
1
vote
1answer
345 views
SSL is not enabled in Heroku
Since Heroku has integrated the piggybank_ssl addon by default, trying:
heroku addons:add piggyback_ssl
or
heroku addons:add ssl:piggyback
results in:
! This add-on is now a standard ...
1
vote
2answers
462 views
cname forward from https to http
We are migrating web host and I wonder if it is possible in the migration phase to do a CNAME forward from https://address1.com to http://address2.com. Would the certificate still work even if the new ...
1
vote
1answer
324 views
How is Facebook avoiding mixed content (SSL/non-SSL) warnings?
I signed up to Farmville and I get a URL like:
https://apps.facebook.com/onthefarm/index.php?ref=tab
At the bottom of the page are ads which are served not using ssl - they are pulling in regular ...
2
votes
2answers
574 views
SSL 128bit… Why not 256bit
Have set up an SSL certificate for a new site, and in checking with the browser, the SSL states it's encrypted with 128bit encryption. I have tried with the latest versions of Chrome, IE9 and FF, all ...
0
votes
1answer
238 views
connection partially encrypted, SSL for perl app
I am getting error on FireFox "connection partially encrypted" other browsers show that's not encrypted...
When I setup apache with ssl I use "/var/www/html/" for default directory, but all scripts ...
2
votes
1answer
1k views
How can mixed content compromise an entire HTTPS session?
Google Chrome is probably one of the stricter browsers out there in terms of highlighting SSL errors.
Most browsers will point out when you are viewing an HTTPS page which loads insecure ...
3
votes
3answers
1k views
Will a simple domain validated SSL certificate show a 'green lock'?
I'm looking into buying an SSL certificate for my domain. I'm considering buying: https://www.ssl.nu/en/products/regular+ssl/ssl+basic/ which is just a domain validation certificate I think. Will ...
2
votes
1answer
740 views
How can I set Webmaster Tools to “Fetch as Google Bot” using SSL?
I have page which requires SSL so the page is https://. I want to fetch this page as google bot inside of google webmasters' diagnostic tools however Google, from what I can tell, only allows http ...
1
vote
2answers
141 views
How to setup SSL to protect secure information
At the moment I have a website running in quite an insecure way, I'll refer to it as example.com.
To add better security we're starting to store passwords using bcrypt but we are currently not using ...
2
votes
3answers
253 views
What is necessary to implement HTTPS?
I'm an iPhone Developer and I've recently got into web development. At the moment I have two sites on the internet, and on one of them, I have a very simplistic CMS I've made.
Firstly, do I need to ...
1
vote
2answers
384 views
rel=canonical required for HTTPS?
I'm offering a page through HTTP and HTTPS, both with the same URL scheme. I.e., a page is available as http://www.example.com/page1.html as well as https://www.example.com/page1.html.
Should I add ...
0
votes
0answers
182 views
SSL is dead slow in Internet Explorer + Safari [closed]
I had a Comodo SSL certificate installed on my website yesterday, after going through a lot of trouble it has finally been activated.
I am, however, experiencing serious issues in Safari and Internet ...
1
vote
1answer
89 views
extra configuration needed after installing SSL certificate?
We recently developed two rather simple PHP applications for AXA (European bank). URL's are axa.tfo.be/incentives/cipres and axa.tfo.be/incentives/zrkk (access to both sites is restricted to visitors ...
0
votes
1answer
82 views
Making a site available at http and https after installing an SSL certificate
I just had hostgator install an SSL certificate on my site. As a result, my site is only available (right now) at https://mysite.com. Based on the answer to this question, it sounds like it's possible ...
6
votes
2answers
115 views
Does https site needs extra configuration after installation of SSL certificate?
I recently developed an incentive website for a European bank, and one of the requirements was SSL - the website displays some personal customer data (though no financial or really sensitive data).
...
2
votes
1answer
82 views
HTTPS on all pages where user is logged on
I know this is considered best practise to prevent cookie hijacking. I would like to adopt this approach, but ran across a problem on our forum where the users post images which either aren't posted ...
6
votes
3answers
290 views
When redirecting from http to https in a shop site, which status code should I use?
On a shop website, when "Pay now" is clicked we perform a header redirection to the same URL, just an SSL secured https version.
In such a common scenario, should we use a permanent (301), a ...
1
vote
1answer
79 views
An ssl server as a reverse proxy to a regular server
If I have a server, secured with ssl, which is setup as a reverse proxy to another server, will the traffic still be encrypted?
0
votes
2answers
141 views
I'm confused about encryption and SSL
while my friends and I planning to run our own website, we're confused about the encryption where hackers can TAPPING or in social engineering it's WIRE TAPPING, but I don't know how do they call it ...
2
votes
1answer
323 views
Error 500 on phpMyAdmin via https from “self-signed certificate”?
I have used Cpanel to generate and install a self-signed certificate for HTTPS and now that I have installed phpMyAdmin once I access phpMyAdmin via HTTPS it throws out an error 500 message.
Why is ...
1
vote
2answers
144 views
How to make SSL/https connection on development server?
I dont want to pay for certificate because its just for my development site can i install any certificate to enable encryption i dont care if browser going to warn against it or not as long ssl will ...
1
vote
1answer
133 views
Can I modify an existing certificate to run on multiple hostnames?
I've been investigating and I found instructions on how to create an SSL certificate with multiple hostnames, but I need to know whether I can modify an existing certificate (not create a new ...
3
votes
2answers
95 views
EV SSL with a static resource server
We have the domain:
www.scirra.com
Which we are going through the process of obtaining an EV SSL certificate for. The site makes use of our static domain to server CSS/images etc. It has 4 ...
2
votes
1answer
92 views
Avoid Comodo certificates?
We are looking at buying an:
EV SSL certificate
Software signing certificate
Comodo seem far cheaper than other providers. However they seem to have bad press.
Is there any disadvantage to using ...
2
votes
0answers
69 views
Has anyone ever claimed a warranty on an SSL certificate? [closed]
SSL certificates often advertise varying amounts of warranties or guarantees, for example $500,000 or $1m.
My question is, in the history of SSL, has anyone ever actually successfully claimed one of ...
2
votes
3answers
1k views
Session cookie being dropped when moving under the SSL
The short version:
I've got a session cookie being set on a dev site but it's not being picked up when I move to the SSL (so the shopping cart empties when you go to the checkout).
When it's set on ...
1
vote
1answer
178 views
Force SSL on IIS site with NT authentication
We recently implemented SSL on our reseller portal and have been receiving complaints about needing to log in twice. This is of course because they bookmarked the site before we had SSL so their ...
3
votes
3answers
312 views
Is there a media player that works on HTTPS sites?
I'm currently using Yahoo! Media Player for a site that needs to play MP3 files that are stored on our server. In total, there's quite a bit more than the free limits at Soundcloud, but each file is ...
8
votes
2answers
196 views
Can I use the same SSL cert for HTTPS and FTPS
I am looking to get an extended SSL certificate for a server that is handling one of my subdomains. Can I use the same certificate for https://sub.example.com and ftps://sub.example.com, assuming that ...
0
votes
0answers
1k views
IIS 7 Still Serving old SSL Certificate [closed]
I installed a new SSL certificate into IIS7, removed the old certificate and setup the bindings for the new certificate - so https is now bound to the new certificate only.
I restarted IIS7 (and the ...
1
vote
2answers
73 views
What kind of SSL do I have?
I am maintaining a site for someone. He needs to know what type of SSL the site has because that data has to submitted to his bank.
I've never been asked such a question. I have cpanel access. But ...
0
votes
1answer
124 views
SSL certificate for 3rd party domain pointed at windows azure role
I have a website hosted on Windows Azure. All pages on the website are on HTTPS. The website can be customized with the customization profile being associated with a uri authority. There is a 3rd ...
4
votes
1answer
310 views
https & ajax crawling
We made on our webpage https://www.1point618.com a transition to ssl and now we using nearly entirely ajax to load the content. Therefore all urls of existing pages have changed. We used the 301 ...
0
votes
1answer
53 views
How do I link to the Chrome download page, from a https:// site?
Is there a way on an html page to have a link to the Chrome download page, from a https:// site? I tried using https:// to the Chrome download site, but it just bounces me to Google.
I'm trying to ...
4
votes
1answer
83 views
What makes a SSL certificate “signed”?
When you buy a SSL certificate from Comodo, it is signed by Comodo and therefore trusted. How is it signed though? Why can't anyone sign the certificate pretending to be Comodo?
1
vote
2answers
5k views
Free HTTPS hosting with PHP support [duplicate]
Possible Duplicate:
How to find web hosting that meets my requirements?
I'm looking for free hosting with HTTPS and PHP support. Of course a subdomain is enough. Something like Google's ...
0
votes
2answers
67 views
Public/Private Key Generation
I'm just learning about public key cryptography and I want to make a public key certificate for my web server so that I can use https. My server is hosted on some random free webhost that is ...
0
votes
1answer
328 views
Why isn't HTTP Authentication working on this Apache HTTPS site?
I have set up a private MoinMoin wiki, accessed through HTTPS, but I cannot get Basic HTTP Authentication to work on it. I have it working on another site, using a similar vhosts file, so I cannot ...
1
vote
1answer
242 views
HTTP and HTTPS impacts on SEO
I have a website http://www.domain_1.com/ hosted in a shared webserver.
I have used SSL for another website https://www.domain_2.com/ on the same server.
Due to some technical limitations (single ...
2
votes
2answers
141 views
Host Change - What is a good method for testing SSL before pointing DNS at new host?
Version 1 of a web application is on an old Host.
Version 2 is on a new host, operating on a test domain.
At launch, we will point the official domain at the new host.
However, I would like to ...
2
votes
1answer
93 views
Forwarded/custom domain names and SSL
Assume I have a website that offers a web-based service to companies:
myservice.com
Each company has a subdomain wildcarded via mod_rewrite:
client1.myservice.com
(This is typical of many ...
2
votes
0answers
167 views
Are there any ad networks that serve ads over SSL? [duplicate]
Possible Duplicate:
Ad service that supports ssl (secure publishing)
I have recently enabled SSL on my site, now my google ads cause some browsers to complain about unsecured content ...
5
votes
2answers
396 views
Ad service that supports ssl (secure publishing)
Is there an add service like adsense that supports SSL ads? I wish to put ads on a secured (https) pages but Google Adsense doesn't support it. I know Adbrite works for text based SSL ads but I ...
5
votes
2answers
455 views
2 SSL certificates?
I just spend ages moving all static content to a cookiless domain to help performance, it seems to work great! It got me thinking though, when I install SSL on my main site, am I also going to have ...
2
votes
3answers
961 views
Do internal intranet websites need to be secure?
The question is in the title.
Does an internal site need to have https security?
For example we have an internal site that handles our client's license keys -- do we need for that to be secure since ...
9
votes
1answer
378 views
Is it really a security problem to have non secure assets on an ssl page?
My understanding is that this is just an example of being overly cautious, but if my checkout form contains an unsecure asset on it, that doesn't endanger anybody's credit card numbers from being ...
3
votes
3answers
482 views
1
vote
3answers
1k views
Unable to download microsoft excel files from a IIS SSL site
The web master at my corporation added SSL to the web site and now none of my users can download Microsoft word and xcel files the sites generates. According to Microsoft the following must be down.
...
7
votes
2answers
487 views
Using HTTPS on the entire sites 2011 and beyond
I know this has been asked before, but I am curious what all of you guys think, with the advent of programs like firesheep, released only 6 months ago. Is it a good idea to use https on an entire ...
3
votes
1answer
331 views
SSL redirection
I want to redirect one of my domain hosted in a domain provider to a different server where I have a Tomcat based application installed. I have purchased SSL for the server with Tomcat installed. The ...
