Secure Sockets Layer (SSL) is a cryptographic protocol that provides communications security over the Internet.

learn more… | top users | synonyms (2)

3
votes
1answer
120 views

HTTPS connection treated differently across browsers

I am using an SSL certificate for a website and the server redirects all http connections to https (a conscious choice). A tool provided by the CA says that the certificate has been installed ...
3
votes
2answers
405 views

What will be the impact on SEO if we remove our SSL certificate (url become http instead of https)?

For some weird reason the content accessed though our domains is returned via SSL HTTPS on all domains pointing to the server. https://domain.com leads to our website, with a proper SSL certificate ...
3
votes
3answers
2k views

DNS configuration to force root domain to www

we have an app running on heroku. the dns setup is like this: A record for domain.com -> heroku front end ip addresses CNAME for www.domain.com -> specific host name for our app provided by heroku ...
3
votes
1answer
102 views

Do I need an SSL Certificate?

I'm thinking about building an app that lets users upload images to sites like Flickr. They would need to enter their password to do this. I would send the data through PHP, do I need to get a SSL ...
3
votes
1answer
241 views

Should every page on every site be behind SSL?

This question stemmed from a discussion here: Ad networks that will serve via https? My question to the OP was "is it necessary to have every page behind SSL?" Admittedly at the time of posting this ...
3
votes
2answers
289 views

CA For A Large Intranet

I'm managing what has become a very large intranet (over 100 different hosts / services) and will be stepping down from my role in the near future. I want to make things easy for the next victim ...
3
votes
1answer
114 views

SSL: What are the differences between Domain Validation and Extended Validation Certificates?

I can get Extended Validation for cheaper than Domain Validation, yearly. What are the differences between them?
3
votes
1answer
2k views

How can I force a VirtualHost in Apache to not listen for undefined subdomains on 443?

In /etc/apache2/sites-available/example.com: <VirtualHost *:443> ServerName www.example.com DocumentRoot /var/www/example.com/htdocs SSLEngine on ...
3
votes
1answer
59 views

Nginx and Google Appengine Reverse Proxy Security

The scenario is that I have a Google compute node running Nginx as a reverse proxy to the google appengine. The appengine is used to service REST calls from an single page application (SPA). HTTPS ...
3
votes
2answers
94 views

cPanel SSL installation

I've tried transferring SSL issued by GoDaddy to Linux based server. The website was originally hosted in Windows. After the installation is completed, I got a message like this in cPanel: ...
3
votes
2answers
85 views

Any reason not to buy SSL certificates from a reseller?

Is there any reason to buy an SSL certificate directly from the host (for $49, for example), instead of through a well-known reseller, for only $10.95? Specifically in my case, I just need to ...
3
votes
1answer
47 views

Google Analytics for sites with SSL protected sections

Google Analytics account creation interface asks whether the URL of the site starts with HTTP or HTTPS. However my site is SSL protected in its payment pages only. Is it possible to have GA cover ...
3
votes
1answer
57 views

SSL on site which asks API via HTTPS

For example I have a site site.com. It has its own http json api: api.site.com. API has authorisation and it runs under https. Now, I need to make visualization of some functionality of json api - so ...
3
votes
1answer
957 views

Enabling SSL on Apache2 causes address already in use error

My server works just fine on a normal Apache2 install. Now, I'm trying to install subversion on this server using a guide I found on the net called: Installation of Subversion on Ubuntu, with Apache, ...
3
votes
1answer
97 views

Using RegEx's in Multi-Channel Funnels in Google Analytics

For some reason, I can't get my multichannel funnel which utilizes RegEx's in the path steps to function -- it keeps coming back with no data. There are a few variables which may be holding things up, ...
3
votes
4answers
626 views

is RapidSSL wildcard cert supported by major browsers?

I'm thinking of buying a wildcard SSL cert from clickSSL : http://www.clickssl.com/rapidssl/rapidsslwildcard.aspx That would be a rapidssl certificate, and I was looking into my firefox options to ...
3
votes
1answer
391 views

SSL redirection

I want to redirect one of my domain hosted in a domain provider to a different server where I have a Tomcat based application installed. I have purchased SSL for the server with Tomcat installed. The ...
3
votes
2answers
82 views

Switching to HTTPS - redirect question

Following the recent Google announcements about improved ranking for sites running on https we have a number of clients asking about this. Is it safe to just 301 redirect all pages to their SSL ...
3
votes
1answer
107 views

Domain changes required for SSL integration

Currently my site supports regular payment options (User is taken to Payment Gateway/PG website). Now I'm trying to implement "seamless" PG integration. I need SSL for this. I'm having a dedicated ...
3
votes
3answers
404 views

Is there a media player that works on HTTPS sites?

I'm currently using Yahoo! Media Player for a site that needs to play MP3 files that are stored on our server. In total, there's quite a bit more than the free limits at Soundcloud, but each file is ...
2
votes
1answer
167 views

Does an SSL Certificate actually require a dedicated IP?

My web host which I have been with for at least going on 8 years now is requiring a dedicated IP address, which is $3.33/Month now for assigning a SSL Certificate with my web hosting package and ...
2
votes
2answers
628 views

EV SSL Certificates - does anyone care?

Is any one aware of any data or studies from an impartial source that show the impact of EV SSL certificates on customer behavior? I've been unable to find any such studies. If an EV SSL certificate ...
2
votes
1answer
217 views

Will Googlebot crawl HTTPS URLs that are encrypted by SSL?

This question was asked at StackOverflow, but it doesn't have good references. Does Googlebot crawl HTTPS? (Please provide references.)
2
votes
3answers
4k views

HTTPS page loading non-https images

I have a https site which links to images from a cdn, as well as user-generated image links that are not https. I get errors like this in console: The page at https://site.com displayed insecure ...
2
votes
3answers
375 views

What is necessary to implement HTTPS?

I'm an iPhone Developer and I've recently got into web development. At the moment I have two sites on the internet, and on one of them, I have a very simplistic CMS I've made. Firstly, do I need to ...
2
votes
2answers
3k views

Mod Rewrite - directing HTTP/HTTPS traffic to the appropriate virtual hosts

I have an Apache2 web server (v. 2.2.16) running on Debian hosting three virtual hosts. The first two hosts are HTTP only (server1 and server2). The last host is HTTPS only (server3). My virtual host ...
2
votes
3answers
92 views

Would a self-signed certificate impact my site for search engines?

Would a self-signed certificate impact my site for search engines? By that I mean, do robots refuse to index sites with self-signed certificates?
2
votes
3answers
116 views

Website doesn't default to HTTPS

I'm kinda new to this so bear with me. I just finished setting up SSL on my website. The problem is that if the user types www.mydomain.com into their browser, it doesn't connect securely with HTTPS. ...
2
votes
3answers
166 views

Should I get an SGC enabled SSL certificate?

I'm in the market for a new SSL certificate and am wondering if I should get an SGC enabled certificate or not? In the past I have just used cheap SSL certificates but since this is for a new company ...
2
votes
1answer
4k views

Redirect HTTPS request to HTTP in Apache

Can an HTTPS request be redirected to an HTTP request in Apache? If so, how?
2
votes
1answer
23 views

Cache HTTPS + SSL

A lot of resources claim that websites with HTTPS + SSL will not be cached. Is this true? If so, why? If so, can this be prevented? I heard that this depends on the browser, but that the most ...
2
votes
1answer
48 views

Google is re-indexing pages after redirecting URLs from HTTP to HTTPS incorrectly

I upgraded my site so that all pages have gone from using HTTP to HTTPS. I didn't consider that Google treats HTTPS pages differently than HTTP. I recreated my sitemap to so that all links now ...
2
votes
1answer
113 views

SSL not working on home page

Recently set up a server for a client and installed a Comodo Positive SSL certificate. In firefox everywhere on the website I can see the padlock icon which shows the Comodo verification, except the ...
2
votes
2answers
130 views

Will using HTTPS hurt my site's SEO or other statistics?

I've set up a WordPress blog. Since I have to log into it from many different locations/machines, I've also got an SSL certificate, and set up Apache to redirect HTTP to HTTPS. It all works, but I'm ...
2
votes
1answer
72 views

Duplicate content caused by HTTPS pages

I have a landing page that can be called by HTTP and also by HTTPS. The canonical URL links to the HTTP version. In some comments I have read that the HTTPS version is never read by a Googlebot. Is ...
2
votes
1answer
215 views

Why does navigating to http:// then redirect to https:// give mixed content warning?

If I directly navigate to https://scotthelme.co.uk I get a green TLS indicator in the address bar. If I navigate to http://scotthelme.com which issues a 301 to https://scotthelme.co.uk I get a mixed ...
2
votes
2answers
218 views

Phpmyadmin http password security

Is my password sent unencrypted when using Phpmyadmin through http? If not, is there any downside using http compared to https?
2
votes
2answers
2k views

Self signed SSL certificate with a wild card - works for sub domain, fails for the main domain

For development purposes I created a self signed SSL certificate where CN = *.example.com. After installing the certificate, when browsing to any sub domain https://sub.example.com I got the nice ...
2
votes
2answers
860 views

SSL 128bit… Why not 256bit

Have set up an SSL certificate for a new site, and in checking with the browser, the SSL states it's encrypted with 128bit encryption. I have tried with the latest versions of Chrome, IE9 and FF, all ...
2
votes
1answer
2k views

How can mixed content compromise an entire HTTPS session?

Google Chrome is probably one of the stricter browsers out there in terms of highlighting SSL errors. Most browsers will point out when you are viewing an HTTPS page which loads insecure ...
2
votes
2answers
676 views

rel=canonical required for HTTPS?

I'm offering a page through HTTP and HTTPS, both with the same URL scheme. I.e., a page is available as http://www.example.com/page1.html as well as https://www.example.com/page1.html. Should I add ...
2
votes
1answer
87 views

HTTPS on all pages where user is logged on

I know this is considered best practise to prevent cookie hijacking. I would like to adopt this approach, but ran across a problem on our forum where the users post images which either aren't posted ...
2
votes
2answers
204 views

Host Change - What is a good method for testing SSL before pointing DNS at new host?

Version 1 of a web application is on an old Host. Version 2 is on a new host, operating on a test domain. At launch, we will point the official domain at the new host. However, I would like to ...
2
votes
2answers
62 views

How to convince Google to list HTTPS version of website? [duplicate]

Having finally configured HTTPS for my company's website, I'm wondering now if there are any steps I can or should take to convince Google's search results to list the site as an HTTPS link rather ...
2
votes
1answer
97 views

Can forwarding https://example.com requests to https://www.example.com be a security risk?

I maintain a retail store's eCommerce website, provided by a 3rd party. The HTTPS links do not load ('ERR_CONNECTION_TIMED_OUT') unless you put in the WWW before the doman name. The HTTP links forward ...
2
votes
1answer
99 views

Intermittent SSL errors

I have a Facebook app hosted on SSL. Some people get "Connection not trusted" when using the app. I do not get the error. I have switched between secure browsing and not using Facebook settings, and ...
2
votes
1answer
474 views

Use SSL on Heroku without paying Heroku for SSL?

In this post, the author suggest a way to get SSL on Heroku without paying Heroku for it: Pay Cloudflare for premium service, and get SSL support with it. Create a CNAME in cloudflare that points to ...
2
votes
1answer
110 views

Google is not seeing my HTTPS website

I have a website and it is working with HTTPS, programatically when someone got to HTTP it forward him to the HTTPS version. My issue that I see that Google Search is not seeing my pages, the website ...
2
votes
2answers
60 views

Running my site using https and a load balancer

I currently have two webservers behind a load balancer that are running my websites. I'm considering buying an SSL certificate for one of my websites and converting it to https. What mechanics to I ...
2
votes
2answers
587 views

Implement SSL in website

Our company have purchased SSL certificate and installed in linux on Host Server. Can you plz tell me how to make use of this in our website. How to configure it in Website.Is there any need to write ...