Questions tagged [https]
HTTPS is the secure version of the hypertext transfer protocol (HTTP). It usually uses port 443 and is powered by the TLS (formerly SSL) cryptographic protocol.
1,009
questions
129
votes
5
answers
247k
views
Moving from HTTP to HTTPS in Google Search Console
I'm moving from HTTP to HTTPS for my entire site. The site is currently added to Google Search Console (formerly Google Webmaster Tools) as www.example.com and all the pages are indexed without using ...
- 1,501
93
votes
5
answers
13k
views
How do I transition to SSL without affecting PageRank?
Here at Stack Exchange we're working on moving all traffic to SSL. The reason we're not doing logged-in-users only is that one side of the login divide would suffer a redirect from Google every time. ...
- 1,023
68
votes
5
answers
12k
views
Why should I pay for an SSL certificate?
I paid for an SSL certificate from Namecheap, I think it was certified by ComodoSSL. It cost me 7$, it took them a week to activate and I had to do it myself from SSH while editing my site's ...
56
votes
12
answers
6k
views
What is the benefit of forcing a site to load over SSL (HTTPS)?
Let's say I have a large content-only site; no login or logout, no usernames, no email addresses, no secure area, nothing secret on the site, nada. People just come to the site and go from page to ...
- 847
43
votes
5
answers
8k
views
What events caused mass migration to HTTPS?
For several years I see that Google, Facebook, etc start serving (and even redirect to) content via HTTPS.
Serving sites that prompts passwords in insecure HTTP was wrong even in 1999 but it ...
40
votes
6
answers
4k
views
Are the different types of SSL certificates a bit of a scam?
I'm looking into getting a few SSL certificates for domains to cover the following:
autodiscover.example.com
remote.example.com
www.example.com
Wildcard certificates are too expensive, so I'm going ...
- 4,984
33
votes
7
answers
48k
views
Why is godaddy HTTPS/SSL certification so much cheaper than digicert, thawte, and verisign?
I am a novice on HTTPS/SSL but GoDaddy charges $12.99 and Digicert, thawte, and Verisign charge $100-1000+ for SSL certificates.
I must be missing something on the quality of the encryption or ...
- 513
32
votes
4
answers
9k
views
What are the benefits of a more expensive SSL certificate?
I've been comparing prices of different SSL certificates and found a massive difference in prices between different providers.
If we take http://www.namecheap.com/learn/other-services/ssl-...
- 423
30
votes
1
answer
28k
views
Which browsers support SNI?
Because of the way web servers and SSL work, previously a dedicated IP address was required for running an SSL certificate on a domain.
But with a new technique (SNI, abbreviation for Server Name ...
- 2,353
29
votes
4
answers
4k
views
Is using only HTTPS bad in a SEO perspective?
I would like to set up a new business site. I plan to direct www.example.com to example.com and only use that domain. My plan is also to only use HTTPS and not HTTP.
Does this affect the SEO for the ...
- 1,920
28
votes
2
answers
95k
views
Can I skip the PEM pass phrase question when I restart the webserver?
After buying a multi-domain SSL certificate I have started testing it with the Nginx webserver (following documentation in their SSL wiki page).
Everything is fine, it works and I get a green ...
- 1,513
27
votes
3
answers
37k
views
IIS 7 Require SSL automatically redirect to https://
I've configured IIS 7 to require SSL. Can I automatically redirect non-SSL requests to be encrypted?
For example, if a user types in http://domain.example, can IIS redirect the request to https://...
- 403
26
votes
5
answers
7k
views
How do I get my site verified such that it shows a green box in Chrome's address bar?
How do I get my site verified by Google Chrome so it has the green box in the address bar? I honestly don't know how to do this. Also, do I have to ask Google to verify it?
- 362
23
votes
6
answers
35k
views
Is unique IP address a must for SSL?
The shared hosting company told me that if I buy an IP address then it will be applicable for the addon domains too. What does it mean? Then the SSL certificate won't work since there will be more ...
- 1,773
23
votes
5
answers
896
views
Force Using SSL on Site now?
I am starting to see a majority of websites starting to use SSL as a standard practice for viewing the website securely now thanks to the revelations of Edward Snowden about the NSA surveillance that ...
user37204
23
votes
2
answers
31k
views
How can my organization become a Root CA?
I'm the founder of a little non-profit French organization.
Currently, we're providing free web and shell hosting.
Is there a way to become a Trusted Certificate Authority, in order to give free SSL ...
- 355
18
votes
2
answers
12k
views
StartSSL certificate gives SEC_ERROR_REVOKED_CERTIFICATE in Firefox and ERR_CERT_AUTHORITY_INVALID in Chrome
My existing HTTPS certificate is expiring soon so I bought a new one. I'm having a very hard time installing it properly though. I have a wildcard certificate from StartSSL for *.deadsea....
- 98.8k
17
votes
5
answers
50k
views
HTTPS connection is "not safe" due to images
I am currently working on a website and I have successfully installed my SSL certificate.
The GeoTrust SSL/TLS checker confirmed that the certificate chain (including CA) is properly installed. ...
- 173
17
votes
2
answers
15k
views
Is there a way of using HTTPS with Amazon's CloudFront CDN and CNAMEs?
We use Amazon's CloudFront CDN with custom CNAMEs hanging under the main domain (static1.example.com). Although we can break this uniform appearance and use the original whatever123wigglyw00....
- 3,683
17
votes
1
answer
8k
views
Should I submit https:// and http:// in Google Search Console both with and without the www?
In my site I'm redirecting everything (http://, http://www., https://) to https://www.example.com.
Google webmaster tools says: Make sure you add both "www" and "non-www" versions for your site. Also,...
- 439
17
votes
2
answers
621
views
If I need HTTPS / SSL encryption on my web site, does it matter who I get my certificate from?
If I need HTTPS / SSL encryption on my web site, does it matter who I get my certificate from? Are some SSL certificate vendors better than others? If so, why?
- 3,763
16
votes
8
answers
14k
views
Huge drop [50%] in traffic after HTTPS move
Currently look after 3 websites. I changed one of them to be HTTPS as it's ecommerce, however have seen a huge drop in organic traffic since this was implemented. Went from around 800 impressions to ...
- 181
15
votes
1
answer
888
views
Cost of using SSL
I am wondering on the cost of using SSL sitewide. It would be for a standard LAMP site. I know that this will be dependent on the many factors but, can some give me an 'average' or 'guesstimate!'. By ...
- 253
15
votes
1
answer
8k
views
How can I set Webmaster Tools to "Fetch as Google Bot" using SSL?
I have page which requires SSL so the page is https://. I want to fetch this page as google bot inside of google webmasters' diagnostic tools however Google, from what I can tell, only allows http ...
- 411
14
votes
2
answers
39k
views
How to optimize the load time of initial connection and SSL handshake phase of a web page on a 3G network?
My website www.example.com(SSL enabled) is hosted on Amazon EC2 shared hosting. It loads faster (load time < 2 seconds) on a wifi/broadband connection. Issue is on 3G network in mobile**(H mode and ...
- 151
14
votes
6
answers
9k
views
Forcing SSL and www in .htaccess
I'm looking for a way to force SSL and www.
I've been able to force both separately but together I keep running into redirection issues. The following code works when handling a URL in this format: ...
- 243
13
votes
6
answers
52k
views
How can I pass referrer header from my https domain to http domains?
My website is 100% https. I have links to other http domains. The referrer header is not set when linking from a https page to a http page. From http://en.wikipedia.org/wiki/HTTP_referrer
If a ...
- 271
12
votes
3
answers
4k
views
Is incorrect to have the HTTPS version of the sitemaps.org URL in the xmlns sitemap schema?
I have the schema with this:
<sitemapindex xmlns="https://www.sitemaps.org/schemas/sitemap/0.9">
Is it correct or should be:
<sitemapindex xmlns="http://www.sitemaps.org/schemas/sitemap/0....
- 358
12
votes
4
answers
1k
views
Does Googlebot support TLS v1.2? If not, what will my TLS v1.2-only site look like to it?
I currently redirect all non-HTTPS connections to HTTPS, and support TLS v1, TLS v1.1, and TLS v1.2. I reconfigured my testing server to accept only a very limited and secure cipher suite and TLSv1.2 ...
- 2,480
12
votes
1
answer
15k
views
Multiple IP addresses for one SSL certificate
Is it possible to register an SSL Certificate for Multiple IP addresses?
This is needed for one of my sites; which runs on two different servers with different IP addresses. One server is live; while ...
- 277
12
votes
3
answers
7k
views
Are there any disadvantages to Cloudflare’s “Flexible SSL”?
Cloudflare lets you serve your site over SSL without having to purchase and install a security certificate, a product they call “Flexible SSL”. (They act as a proxy and serve your site over SSL from ...
- 20.5k
12
votes
5
answers
18k
views
Why would you use document.location.protocol instead of plain // prefixed urls?
For instance Google Analytics uses document.location.protocol in the boilerplate for tracking:
<script type="text/javascript">
var _gaq = _gaq || [];
_gaq.push(['_setAccount', 'UA-XXXXX-X']...
- 3,683
11
votes
6
answers
994
views
SSL certificate provider
I need a SSL certificate for a new site I'm building and I have to choose a SSL provider. What to look for when choosing and what's your experience dealing with them?
Thanks!
- 1,023
11
votes
3
answers
29k
views
htaccess redirect non-www to www with SSL/HTTPS
I want a rewrite rule that redirects everything to https:// AND www.
For example http://example.com should be going to https://www.example.com
This is what I have:
RewriteEngine On
RewriteCond %{...
- 331
11
votes
3
answers
26k
views
How to prevent access to website without SSL connection?
I have a website that has an SSL certificate installed, so that if I access the website using https instead of http I will be able to connect using a secure connection.
However, I have noticed that I ...
- 353
11
votes
4
answers
1k
views
Does SSL really matter for most websites?
I've been pretty paranoid about learning to "do security right" for this site I'm building (first non-trivial site I've made), and I've noticed something that bothers me: SSL.
I've read plenty of ...
- 573
11
votes
1
answer
2k
views
Is it really a security problem to have non secure assets on an ssl page?
My understanding is that this is just an example of being overly cautious, but if my checkout form contains an unsecure asset on it, that doesn't endanger anybody's credit card numbers from being ...
- 287
11
votes
3
answers
16k
views
Google indexes my site as https as opposed to the correct http
Over the last month, the home page of my website hosted on Media Temple's grid server and has been appearing in google listings as an https website. I have never requested or needed the extra ...
MSGDesign
11
votes
4
answers
764
views
Are free SSL certificates secure?
How is it that some SSL certificates are free? What does that mean? Are they secure or not?
- 1,897
11
votes
2
answers
252
views
Choosing which domain to secure
We've got a website that is served on both www.example.com and just example.com - we've never done any sort of forcing users from one domain to the other, so if they land on example.com then that's ...
- 4,984
11
votes
2
answers
2k
views
Using wildcard certificates for multi-server deployment
Currently we are deploying a beta API for our services and we want that all request/responses from the API works over https. I'm confused about using wildcard certificates for both api and www urls. ...
- 399
10
votes
6
answers
2k
views
HTTPS for entire site
I'm working on a fairly standard web site with public content plus personal/customized content for registered users. I know I need to use HTTPS when users are logging in or sending credit card ...
- 1,015
10
votes
4
answers
13k
views
Does SSL require a client side certificate of any kind at all?
A friend insists it does, that both browser and server both need certificates. I say no, only the server requires one, with two keys. The question is whether the browser uses some sort of certificate (...
- 247
10
votes
3
answers
14k
views
Adding links: can I use //domain (double slash) for both https:// and http://
We are moving to https soon. I understand that it is smart to use //domain.com links and images src references.
Does the browser then first try https? and if not found http?
Is this supported by ...
- 653
10
votes
3
answers
12k
views
Performance: 4096 Bit RSA-Key compared to 2048 bit RSA-Key
Is there a comparison between 4096 Bit RSA-Key and a 2048 Bit RSA-Key? I'd like to know what impact on performance it has, if I'm choosing a 4096-Bit key for ssl-encryption. Is there any info which ...
- 201
10
votes
3
answers
6k
views
Are drops in Google ranking common after switching to https?
About a week ago I made the switch to https on one of my sites. I'm positive I did everything right. Properly setup 301 redirects from http to https versions. Added and verified https version in ...
- 103
10
votes
1
answer
8k
views
What happens to a user's browser if an SSL certificate is replaced in mid-session?
In light of modern browsers phasing out security certificates signed using the SHA1 hash algorithm, we're busy replacing all our SHA1 certificates with SHA2. Generally we could simply replace certs ...
- 394
10
votes
1
answer
3k
views
Should we get an EV Certificate?
Our regular SSL provider is offering EV certificates for under $US200, and it just so happens that the certificate for our B2B e-commerce site is expiring in a month (which should give us enough time ...
- 4,984
9
votes
4
answers
4k
views
Do I have to pay a web hosting company for an SSL certificate?
I want to be able to host HTTPS in addition to HTTP and I thought I could simply buy a low cost SSL certificate and copy the certificate to my hosted website?
But my service provider has a variety of ...
- 201
9
votes
4
answers
3k
views
Shield Icons on Google Results Page
The shield icons (circled) appear on my Google search results. My question is - if you have a site that's already https (and shows as such in the search results) what other action do you need to take ...
- 189