Secure Sockets Layer (SSL) is a cryptographic protocol that provides communications security over the Internet.

learn more… | top users | synonyms (2)

3
votes
1answer
300 views

What steps are required to enable SSL on Apache2 with Ubuntu?

I am developing a strategy game for web where there there will be a lot of client-server traffic for sending attacks, moves, etc. Right now I send messages from the client to the server via HTTP, and ...
3
votes
1answer
68 views

Ensuring secure downloads for IIS

One of my customers wants to make sure that when someone downloads a file from their website the file being downloaded is secure from third parties capturing the downloaded information. Their site is ...
3
votes
1answer
128 views

HTTPS connection treated differently across browsers

I am using an SSL certificate for a website and the server redirects all http connections to https (a conscious choice). A tool provided by the CA says that the certificate has been installed ...
3
votes
2answers
409 views

What will be the impact on SEO if we remove our SSL certificate (url become http instead of https)?

For some weird reason the content accessed though our domains is returned via SSL HTTPS on all domains pointing to the server. https://domain.com leads to our website, with a proper SSL certificate ...
3
votes
3answers
2k views

DNS configuration to force root domain to www

we have an app running on heroku. the dns setup is like this: A record for domain.com -> heroku front end ip addresses CNAME for www.domain.com -> specific host name for our app provided by heroku ...
3
votes
1answer
102 views

Do I need an SSL Certificate?

I'm thinking about building an app that lets users upload images to sites like Flickr. They would need to enter their password to do this. I would send the data through PHP, do I need to get a SSL ...
3
votes
1answer
242 views

Should every page on every site be behind SSL?

This question stemmed from a discussion here: Ad networks that will serve via https? My question to the OP was "is it necessary to have every page behind SSL?" Admittedly at the time of posting this ...
3
votes
2answers
291 views

CA For A Large Intranet

I'm managing what has become a very large intranet (over 100 different hosts / services) and will be stepping down from my role in the near future. I want to make things easy for the next victim ...
3
votes
1answer
114 views

SSL: What are the differences between Domain Validation and Extended Validation Certificates?

I can get Extended Validation for cheaper than Domain Validation, yearly. What are the differences between them?
3
votes
1answer
2k views

How can I force a VirtualHost in Apache to not listen for undefined subdomains on 443?

In /etc/apache2/sites-available/example.com: <VirtualHost *:443> ServerName www.example.com DocumentRoot /var/www/example.com/htdocs SSLEngine on ...
3
votes
1answer
78 views

Nginx and Google Appengine Reverse Proxy Security

The scenario is that I have a Google compute node running Nginx as a reverse proxy to the google appengine. The appengine is used to service REST calls from an single page application (SPA). HTTPS ...
3
votes
2answers
99 views

cPanel SSL installation

I've tried transferring SSL issued by GoDaddy to Linux based server. The website was originally hosted in Windows. After the installation is completed, I got a message like this in cPanel: ...
3
votes
2answers
85 views

Any reason not to buy SSL certificates from a reseller?

Is there any reason to buy an SSL certificate directly from the host (for $49, for example), instead of through a well-known reseller, for only $10.95? Specifically in my case, I just need to ...
3
votes
1answer
49 views

Google Analytics for sites with SSL protected sections

Google Analytics account creation interface asks whether the URL of the site starts with HTTP or HTTPS. However my site is SSL protected in its payment pages only. Is it possible to have GA cover ...
3
votes
1answer
57 views

SSL on site which asks API via HTTPS

For example I have a site site.com. It has its own http json api: api.site.com. API has authorisation and it runs under https. Now, I need to make visualization of some functionality of json api - so ...
3
votes
1answer
1k views

Enabling SSL on Apache2 causes address already in use error

My server works just fine on a normal Apache2 install. Now, I'm trying to install subversion on this server using a guide I found on the net called: Installation of Subversion on Ubuntu, with Apache, ...
3
votes
1answer
98 views

Using RegEx's in Multi-Channel Funnels in Google Analytics

For some reason, I can't get my multichannel funnel which utilizes RegEx's in the path steps to function -- it keeps coming back with no data. There are a few variables which may be holding things up, ...
3
votes
4answers
634 views

is RapidSSL wildcard cert supported by major browsers?

I'm thinking of buying a wildcard SSL cert from clickSSL : http://www.clickssl.com/rapidssl/rapidsslwildcard.aspx That would be a rapidssl certificate, and I was looking into my firefox options to ...
3
votes
1answer
393 views

SSL redirection

I want to redirect one of my domain hosted in a domain provider to a different server where I have a Tomcat based application installed. I have purchased SSL for the server with Tomcat installed. The ...
3
votes
2answers
86 views

Switching to HTTPS - redirect question

Following the recent Google announcements about improved ranking for sites running on https we have a number of clients asking about this. Is it safe to just 301 redirect all pages to their SSL ...
3
votes
1answer
107 views

Domain changes required for SSL integration

Currently my site supports regular payment options (User is taken to Payment Gateway/PG website). Now I'm trying to implement "seamless" PG integration. I need SSL for this. I'm having a dedicated ...
3
votes
3answers
407 views

Is there a media player that works on HTTPS sites?

I'm currently using Yahoo! Media Player for a site that needs to play MP3 files that are stored on our server. In total, there's quite a bit more than the free limits at Soundcloud, but each file is ...
2
votes
1answer
219 views

Does an SSL Certificate actually require a dedicated IP?

My web host which I have been with for at least going on 8 years now is requiring a dedicated IP address, which is $3.33/Month now for assigning a SSL Certificate with my web hosting package and ...
2
votes
2answers
644 views

EV SSL Certificates - does anyone care?

Is any one aware of any data or studies from an impartial source that show the impact of EV SSL certificates on customer behavior? I've been unable to find any such studies. If an EV SSL certificate ...
2
votes
1answer
249 views

Will Googlebot crawl HTTPS URLs that are encrypted by SSL?

This question was asked at StackOverflow, but it doesn't have good references. Does Googlebot crawl HTTPS? (Please provide references.)
2
votes
3answers
4k views

HTTPS page loading non-https images

I have a https site which links to images from a cdn, as well as user-generated image links that are not https. I get errors like this in console: The page at https://site.com displayed insecure ...
2
votes
3answers
383 views

What is necessary to implement HTTPS?

I'm an iPhone Developer and I've recently got into web development. At the moment I have two sites on the internet, and on one of them, I have a very simplistic CMS I've made. Firstly, do I need to ...
2
votes
2answers
3k views

Mod Rewrite - directing HTTP/HTTPS traffic to the appropriate virtual hosts

I have an Apache2 web server (v. 2.2.16) running on Debian hosting three virtual hosts. The first two hosts are HTTP only (server1 and server2). The last host is HTTPS only (server3). My virtual host ...
2
votes
3answers
123 views

Would a self-signed certificate impact my site for search engines?

Would a self-signed certificate impact my site for search engines? By that I mean, do robots refuse to index sites with self-signed certificates?
2
votes
3answers
119 views

Website doesn't default to HTTPS

I'm kinda new to this so bear with me. I just finished setting up SSL on my website. The problem is that if the user types www.mydomain.com into their browser, it doesn't connect securely with HTTPS. ...
2
votes
3answers
173 views

Should I get an SGC enabled SSL certificate?

I'm in the market for a new SSL certificate and am wondering if I should get an SGC enabled certificate or not? In the past I have just used cheap SSL certificates but since this is for a new company ...
2
votes
1answer
4k views

Redirect HTTPS request to HTTP in Apache

Can an HTTPS request be redirected to an HTTP request in Apache? If so, how?
2
votes
1answer
29 views

Cache HTTPS + SSL

A lot of resources claim that websites with HTTPS + SSL will not be cached. Is this true? If so, why? If so, can this be prevented? I heard that this depends on the browser, but that the most ...
2
votes
1answer
73 views

Google is re-indexing pages after redirecting URLs from HTTP to HTTPS incorrectly

I upgraded my site so that all pages have gone from using HTTP to HTTPS. I didn't consider that Google treats HTTPS pages differently than HTTP. I recreated my sitemap to so that all links now ...
2
votes
1answer
118 views

SSL not working on home page

Recently set up a server for a client and installed a Comodo Positive SSL certificate. In firefox everywhere on the website I can see the padlock icon which shows the Comodo verification, except the ...
2
votes
2answers
134 views

Will using HTTPS hurt my site's SEO or other statistics?

I've set up a WordPress blog. Since I have to log into it from many different locations/machines, I've also got an SSL certificate, and set up Apache to redirect HTTP to HTTPS. It all works, but I'm ...
2
votes
1answer
72 views

Duplicate content caused by HTTPS pages

I have a landing page that can be called by HTTP and also by HTTPS. The canonical URL links to the HTTP version. In some comments I have read that the HTTPS version is never read by a Googlebot. Is ...
2
votes
1answer
221 views

Why does navigating to http:// then redirect to https:// give mixed content warning?

If I directly navigate to https://scotthelme.co.uk I get a green TLS indicator in the address bar. If I navigate to http://scotthelme.com which issues a 301 to https://scotthelme.co.uk I get a mixed ...
2
votes
2answers
232 views

Phpmyadmin http password security

Is my password sent unencrypted when using Phpmyadmin through http? If not, is there any downside using http compared to https?
2
votes
2answers
2k views

Self signed SSL certificate with a wild card - works for sub domain, fails for the main domain

For development purposes I created a self signed SSL certificate where CN = *.example.com. After installing the certificate, when browsing to any sub domain https://sub.example.com I got the nice ...
2
votes
2answers
885 views

SSL 128bit… Why not 256bit

Have set up an SSL certificate for a new site, and in checking with the browser, the SSL states it's encrypted with 128bit encryption. I have tried with the latest versions of Chrome, IE9 and FF, all ...
2
votes
2answers
700 views

rel=canonical required for HTTPS?

I'm offering a page through HTTP and HTTPS, both with the same URL scheme. I.e., a page is available as http://www.example.com/page1.html as well as https://www.example.com/page1.html. Should I add ...
2
votes
1answer
87 views

HTTPS on all pages where user is logged on

I know this is considered best practise to prevent cookie hijacking. I would like to adopt this approach, but ran across a problem on our forum where the users post images which either aren't posted ...
2
votes
2answers
210 views

Host Change - What is a good method for testing SSL before pointing DNS at new host?

Version 1 of a web application is on an old Host. Version 2 is on a new host, operating on a test domain. At launch, we will point the official domain at the new host. However, I would like to ...
2
votes
2answers
66 views

How to convince Google to list HTTPS version of website? [duplicate]

Having finally configured HTTPS for my company's website, I'm wondering now if there are any steps I can or should take to convince Google's search results to list the site as an HTTPS link rather ...
2
votes
1answer
102 views

Can forwarding https://example.com requests to https://www.example.com be a security risk?

I maintain a retail store's eCommerce website, provided by a 3rd party. The HTTPS links do not load ('ERR_CONNECTION_TIMED_OUT') unless you put in the WWW before the doman name. The HTTP links forward ...
2
votes
1answer
115 views

Intermittent SSL errors

I have a Facebook app hosted on SSL. Some people get "Connection not trusted" when using the app. I do not get the error. I have switched between secure browsing and not using Facebook settings, and ...
2
votes
1answer
554 views

Use SSL on Heroku without paying Heroku for SSL?

In this post, the author suggest a way to get SSL on Heroku without paying Heroku for it: Pay Cloudflare for premium service, and get SSL support with it. Create a CNAME in cloudflare that points to ...
2
votes
1answer
111 views

Google is not seeing my HTTPS website

I have a website and it is working with HTTPS, programatically when someone got to HTTP it forward him to the HTTPS version. My issue that I see that Google Search is not seeing my pages, the website ...
2
votes
1answer
38 views

HTTPS Causes Broken Back Links?

If I change my URL to force https does this effect all of my backlinks to be broken and to be lost one by one? And if so if I change it back will it will this restore the back links on the site? Any ...