Secure Sockets Layer (SSL) is a cryptographic protocol that provides communications security over the Internet.

learn more… | top users | synonyms (2)

3
votes
3answers
380 views

Is there a media player that works on HTTPS sites?

I'm currently using Yahoo! Media Player for a site that needs to play MP3 files that are stored on our server. In total, there's quite a bit more than the free limits at Soundcloud, but each file is ...
2
votes
2answers
894 views

SSL certificate - which one to buy? [duplicate]

Possible Duplicate: SSL certificate provider Hello, I'm trying to set up Https for my e-commerce site on webfaction hosting. Was trying to buy SSL certificate from godaddy.com which has ...
2
votes
2answers
584 views

EV SSL Certificates - does anyone care?

Is any one aware of any data or studies from an impartial source that show the impact of EV SSL certificates on customer behavior? I've been unable to find any such studies. If an EV SSL certificate ...
2
votes
1answer
123 views

Will Googlebot crawl HTTPS URLs that are encrypted by SSL?

This question was asked at StackOverflow, but it doesn't have good references. Does Googlebot crawl HTTPS? (Please provide references.)
2
votes
1answer
658 views

SSL between customer's domain having CNAME to our secured server?

We're setting up a payment service -- a few pages to collect credit cards, and do other stuff that needs to be secure. We would like to offer the service to customers via a cobranded page we serve ...
2
votes
3answers
358 views

What is necessary to implement HTTPS?

I'm an iPhone Developer and I've recently got into web development. At the moment I have two sites on the internet, and on one of them, I have a very simplistic CMS I've made. Firstly, do I need to ...
2
votes
2answers
3k views

Mod Rewrite - directing HTTP/HTTPS traffic to the appropriate virtual hosts

I have an Apache2 web server (v. 2.2.16) running on Debian hosting three virtual hosts. The first two hosts are HTTP only (server1 and server2). The last host is HTTPS only (server3). My virtual host ...
2
votes
3answers
52 views

Would a self-signed certificate impact my site for search engines?

Would a self-signed certificate impact my site for search engines? By that I mean, do robots refuse to index sites with self-signed certificates?
2
votes
3answers
106 views

Website doesn't default to HTTPS

I'm kinda new to this so bear with me. I just finished setting up SSL on my website. The problem is that if the user types www.mydomain.com into their browser, it doesn't connect securely with HTTPS. ...
2
votes
3answers
159 views

Should I get an SGC enabled SSL certificate?

I'm in the market for a new SSL certificate and am wondering if I should get an SGC enabled certificate or not? In the past I have just used cheap SSL certificates but since this is for a new company ...
2
votes
1answer
4k views

Redirect HTTPS request to HTTP in Apache

Can an HTTPS request be redirected to an HTTP request in Apache? If so, how?
2
votes
2answers
81 views

Will using HTTPS hurt my site's SEO or other statistics?

I've set up a WordPress blog. Since I have to log into it from many different locations/machines, I've also got an SSL certificate, and set up Apache to redirect HTTP to HTTPS. It all works, but I'm ...
2
votes
1answer
63 views

Duplicate content caused by HTTPS pages

I have a landing page that can be called by HTTP and also by HTTPS. The canonical URL links to the HTTP version. In some comments I have read that the HTTPS version is never read by a Googlebot. Is ...
2
votes
1answer
177 views

Why does navigating to http:// then redirect to https:// give mixed content warning?

If I directly navigate to https://scotthelme.co.uk I get a green TLS indicator in the address bar. If I navigate to http://scotthelme.com which issues a 301 to https://scotthelme.co.uk I get a mixed ...
2
votes
2answers
184 views

Phpmyadmin http password security

Is my password sent unencrypted when using Phpmyadmin through http? If not, is there any downside using http compared to https?
2
votes
2answers
2k views

Self signed SSL certificate with a wild card - works for sub domain, fails for the main domain

For development purposes I created a self signed SSL certificate where CN = *.example.com. After installing the certificate, when browsing to any sub domain https://sub.example.com I got the nice ...
2
votes
2answers
765 views

SSL 128bit… Why not 256bit

Have set up an SSL certificate for a new site, and in checking with the browser, the SSL states it's encrypted with 128bit encryption. I have tried with the latest versions of Chrome, IE9 and FF, all ...
2
votes
1answer
2k views

How can mixed content compromise an entire HTTPS session?

Google Chrome is probably one of the stricter browsers out there in terms of highlighting SSL errors. Most browsers will point out when you are viewing an HTTPS page which loads insecure ...
2
votes
1answer
87 views

HTTPS on all pages where user is logged on

I know this is considered best practise to prevent cookie hijacking. I would like to adopt this approach, but ran across a problem on our forum where the users post images which either aren't posted ...
2
votes
2answers
192 views

Host Change - What is a good method for testing SSL before pointing DNS at new host?

Version 1 of a web application is on an old Host. Version 2 is on a new host, operating on a test domain. At launch, we will point the official domain at the new host. However, I would like to ...
2
votes
1answer
53 views

Intermittent SSL errors

I have a Facebook app hosted on SSL. Some people get "Connection not trusted" when using the app. I do not get the error. I have switched between secure browsing and not using Facebook settings, and ...
2
votes
1answer
258 views

Use SSL on Heroku without paying Heroku for SSL?

In this post, the author suggest a way to get SSL on Heroku without paying Heroku for it: Pay Cloudflare for premium service, and get SSL support with it. Create a CNAME in cloudflare that points to ...
2
votes
1answer
98 views

Google is not seeing my HTTPS website

I have a website and it is working with HTTPS, programatically when someone got to HTTP it forward him to the HTTPS version. My issue that I see that Google Search is not seeing my pages, the website ...
2
votes
2answers
60 views

Running my site using https and a load balancer

I currently have two webservers behind a load balancer that are running my websites. I'm considering buying an SSL certificate for one of my websites and converting it to https. What mechanics to I ...
2
votes
2answers
546 views

Implement SSL in website

Our company have purchased SSL certificate and installed in linux on Host Server. Can you plz tell me how to make use of this in our website. How to configure it in Website.Is there any need to write ...
2
votes
1answer
126 views

Avoid Comodo certificates?

We are looking at buying an: EV SSL certificate Software signing certificate Comodo seem far cheaper than other providers. However they seem to have bad press. Is there any disadvantage to using ...
2
votes
1answer
372 views

Restrict SSL access for some paths on a apache2 server

I wanted to allow access to www.mydomain.com/login through ssl only. E.g.: Whenever someone accessed http://www.mydomain.com/login, I wanted him to be redirect to https://www.mydomain.com/login so ...
2
votes
2answers
89 views

Issue with security certificate name

I have inherited an old website whose security certificate causes this error when viewed with IE. "The name on the security certificate is invalid or does not match the name of the site" Is there ...
2
votes
1answer
245 views

Advice on buying SSL certificate [duplicate]

Possible Duplicate: SSL certificate provider What are the main things to consider when choosing between SSL certificates from different providers? I find they vary in price incredibly.
2
votes
1answer
1k views

How to set the Bit Length when generating SSL Certificat with Java keytool?

I'm going to create a SSL Certificate so I can use https on my web site. I have to generate a Certificate Signing Request (CSR) and I did generate such a file with the Java keytool following the guide ...
2
votes
1answer
35 views

Can I get source URL from Google search if I switch to HTTPS myself?

HTTPS cloaks the keywords, but I've read that by enabling HTTPS on my site I may at least get the source URL's - if the browser goes from HTTPS -> HTTPS it does not drop the source url in the packet ...
2
votes
1answer
88 views

How can I make FTP connections secure in WHM?

For security reasons (since FTP transmits passwords and files in plain text), I want to force users of my shared hosting to use FTPS or SFTP instead of regular FTP. I am using WHM but have limited ...
2
votes
2answers
78 views

How can I prevent HTTPS on another domain from wrongly showing on my HTTP-only domain?

So, I have a blog at domain.com. This blog is HTTP-only because I would gain almost nothing from adding SSL support. I have a web service now that I want to enable SSL support on that runs on the same ...
2
votes
1answer
31 views

HTTPS Causes Broken Back Links?

If I change my URL to force https does this effect all of my backlinks to be broken and to be lost one by one? And if so if I change it back will it will this restore the back links on the site? Any ...
2
votes
1answer
2k views

How can I force a VirtualHost in Apache to not listen for undefined subdomains on 443?

In /etc/apache2/sites-available/example.com: <VirtualHost *:443> ServerName www.example.com DocumentRoot /var/www/example.com/htdocs SSLEngine on ...
2
votes
2answers
969 views

https:// search results appearing on Google for purely http:// site

I started weeding through my site's search results from Google today, using a site: search, to determine if there are any links that cause 404s and thus need redirecting. To my amazement I noticed ...
2
votes
1answer
219 views

Is my .htaccess settings hurting SEO?

I have a site that I have redirecting to HTTPS. I do this to leverage wildcard SSL for my password protected pages. Everything seems to work fine with testing. For example, whether you type in HTTP or ...
2
votes
2answers
138 views

What are the dis-advantages of installing the ssl certificate for the naked domain?

I might buy an SSL certificate for my sie. I know that it will help me in many ways. But will there be dis-advantages also? eg. If I load an image from another server (using plain http), will ...
2
votes
1answer
306 views

Seeking .htaccess help: Converting multiple subdomains (both HTTP and HTTPS) to www.domain.com using .htaccess

I've been trying to get an answer to this question on other forums (the folks at SuperUser thought this was the place I needed to post) and via my connections, but I haven't gotten very far. Hopefully ...
2
votes
2answers
3k views

Apache2: How to host apps at different ports with SSL?

I'm trying to achieve quite simple task actually. I bind application to a port, I enable SSLEngine at each VirtualHost entry for that port. Everything works beside one thing: if you type url that ...
2
votes
1answer
460 views

Using HTTP (insecure) ad providers on HTTPS (secure) site

As more and more browsers adopt stringent checks around preventing insecure content served up on secure sites, there is impact on the use of ad networks which in many cases don't support the secure ...
2
votes
1answer
315 views

DNS name/host-header specific url-pattern/security-constraint, to not require SSL with Tomcat6

I am needing to enable SSL on an application hosted through Tomcat6 and I have added the following to the tomcat web.xml: <security-constraint> <web-resource-collection> ...
2
votes
1answer
1k views

How to prevent “SSL Certificate Chain Not Sorted”

I just got an message SSL Certificate Chain Not Sorted when I scanned my server configuration...I am not sure how to order or sort the certificates. I have a SSL certificate and intermediate ...
2
votes
1answer
204 views

SSL Certificate Works in Monit - But Not in Keystore

I have a situation where there's a keystore file with the various root/intermediate certificates stored in it in a way that it seems to work for most browsers. Problem is that when mobile browsers ...
2
votes
1answer
386 views

Error 500 on phpMyAdmin via https from “self-signed certificate”?

I have used Cpanel to generate and install a self-signed certificate for HTTPS and now that I have installed phpMyAdmin once I access phpMyAdmin via HTTPS it throws out an error 500 message. Why is ...
2
votes
3answers
2k views

Session cookie being dropped when moving under the SSL

The short version: I've got a session cookie being set on a dev site but it's not being picked up when I move to the SSL (so the shopping cart empties when you go to the checkout). When it's set on ...
2
votes
1answer
134 views

Forwarded/custom domain names and SSL

Assume I have a website that offers a web-based service to companies: myservice.com Each company has a subdomain wildcarded via mod_rewrite: client1.myservice.com (This is typical of many ...
2
votes
2answers
611 views

Tool to check non-SSL calls?

Is there a tool that will scan all elements on a webpage and report which item is making a non-SSL call? My webapp keeps showing the mixed use icon and everything I can see is good. :/ Thanks!
2
votes
2answers
288 views

Security - DiscoverCard.com

I have a security, SSL question about http://discovercard.com/ When you first go to Discover Card's Home Page you are able to type in your user name and password without the website being protected ...
2
votes
1answer
46 views

cPanel SSL installation

I've tried transferring SSL issued by GoDaddy to Linux based server. The website was originally hosted in Windows. After the installation is completed, I got a message like this in cPanel: ...