Secure Sockets Layer (SSL) is a cryptographic protocol that provides communications security over the Internet.

learn more… | top users | synonyms (2)

2
votes
2answers
210 views

Host Change - What is a good method for testing SSL before pointing DNS at new host?

Version 1 of a web application is on an old Host. Version 2 is on a new host, operating on a test domain. At launch, we will point the official domain at the new host. However, I would like to ...
2
votes
1answer
175 views

Forwarded/custom domain names and SSL

Assume I have a website that offers a web-based service to companies: myservice.com Each company has a subdomain wildcarded via mod_rewrite: client1.myservice.com (This is typical of many ...
2
votes
0answers
169 views

Are there any ad networks that serve ads over SSL? [duplicate]

Possible Duplicate: Ad service that supports ssl (secure publishing) I have recently enabled SSL on my site, now my google ads cause some browsers to complain about unsecured content ...
6
votes
2answers
644 views

Ad service that supports ssl (secure publishing)

Is there an add service like adsense that supports SSL ads? I wish to put ads on a secured (https) pages but Google Adsense doesn't support it. I know Adbrite works for text based SSL ads but I ...
7
votes
2answers
680 views

2 SSL certificates?

I just spend ages moving all static content to a cookiless domain to help performance, it seems to work great! It got me thinking though, when I install SSL on my main site, am I also going to have ...
3
votes
3answers
2k views

Do internal intranet websites need to be secure?

The question is in the title. Does an internal site need to have https security? For example we have an internal site that handles our client's license keys -- do we need for that to be secure since ...
10
votes
1answer
683 views

Is it really a security problem to have non secure assets on an ssl page?

My understanding is that this is just an example of being overly cautious, but if my checkout form contains an unsecure asset on it, that doesn't endanger anybody's credit card numbers from being ...
3
votes
3answers
677 views

Windows equivalent of localtunnel

Does anyone know of a Windows equivalent of localtunnel?
1
vote
3answers
2k views

Unable to download microsoft excel files from a IIS SSL site

The web master at my corporation added SSL to the web site and now none of my users can download Microsoft word and xcel files the sites generates. According to Microsoft the following must be down. ...
7
votes
2answers
554 views

Using HTTPS on the entire sites 2011 and beyond

I know this has been asked before, but I am curious what all of you guys think, with the advent of programs like firesheep, released only 6 months ago. Is it a good idea to use https on an entire ...
3
votes
1answer
393 views

SSL redirection

I want to redirect one of my domain hosted in a domain provider to a different server where I have a Tomcat based application installed. I have purchased SSL for the server with Tomcat installed. The ...
2
votes
1answer
385 views

Restrict SSL access for some paths on a apache2 server

I wanted to allow access to www.mydomain.com/login through ssl only. E.g.: Whenever someone accessed http://www.mydomain.com/login, I wanted him to be redirect to https://www.mydomain.com/login so ...
1
vote
1answer
333 views

HTTPS on my ASP.NET 2.0 application

I have an application developed using asp.net 2.0 and the goal is to make the webpage secure by using the https protocol. I have searched all over the internet for some insight on how to accomplish ...
2
votes
2answers
681 views

Tool to check non-SSL calls?

Is there a tool that will scan all elements on a webpage and report which item is making a non-SSL call? My webapp keeps showing the mixed use icon and everything I can see is good. :/ Thanks!
16
votes
6answers
21k views

Is unique IP address a must for SSL?

The shared hosting company told me that if I buy an IP address then it will be applicable for the addon domains too. What does it mean? Then the SSL certificate won't work since there will be more ...
0
votes
1answer
960 views

How to set up Https on cPanel

Hello I want to set up https on CPanel! but I don't know how? Is there anyone here that can help me? My cpanel version is cPanel Pro 1.0 (RC1).
2
votes
2answers
90 views

Issue with security certificate name

I have inherited an old website whose security certificate causes this error when viewed with IE. "The name on the security certificate is invalid or does not match the name of the site" Is there ...
3
votes
4answers
3k views

Firefox reports HTTPS page to contain non-secure elements

When I visit our web site pages with IE over HTTPS, it reports the web site as protected (i.e. no elements are taken using HTTP). The same page, when loaded to Firefox, causes Firefox to complain that ...
5
votes
3answers
6k views

Google Analytics: How can I track between http:// and https:// profiles for a domain?

I'm trying to set up tracking on a project that I'm working on. The main site is at http://www.example.com/ The order page is at https://www.example.com/index.php Currently they have two ...
1
vote
2answers
259 views

SSL Configuration Problem

I've generated an SSL certificate with keytool: keytool -keystore keystore -alias mySite -genkey -keyalg RSA -keysize 2048 I got this configured and working fine, but obviously it wasn't signed by ...
1
vote
1answer
123 views

How do SSL certificate authorities verify domains?

What is a reasonable and reputable SSL certificate signing authority -- and how do they verify the domain in the simplest case? Do they simply send an email to the Technical Contact for the domain ...
1
vote
1answer
48 views

www.mydomain.com secure but not mydomain.com? [duplicate]

Possible Duplicate: www.mydomain.com secure but not mydomain.com? Hi We've got our website running and https / ssl works just great. EXCEPT when users enter http://www.mydomain.com and ...
1
vote
2answers
118 views

SSL Certification on both www and no-www domains

We've got our website running and HTTPS / SSL works just great. EXCEPT: when users enter http://www.mydomain.com and then enter the secure area and get directed to https://www.mydomain.com it works ...
2
votes
1answer
261 views

Advice on buying SSL certificate [duplicate]

Possible Duplicate: SSL certificate provider What are the main things to consider when choosing between SSL certificates from different providers? I find they vary in price incredibly.
6
votes
2answers
349 views

SSL Warranty - Meaningless?

Lots of SSL seem to come with a warranty: Extended Validation, Green Address Bar 40-bit minimum to 256-bit encryption USD $100,000 warranty VeriSign Trust™ Seal and services Has anyone in history ...
5
votes
1answer
6k views

How to install mod_ssl for Apache

I have installed Apache httpd a while ago and have recently come back to it to try setup SSL and get it serving several different tomcat servers. At the moment I have two completely separate tomcat ...
1
vote
1answer
133 views

fully encrypt website using SSL

I had been trying to use SSL for the following site http://bit.ly/e8Lj32 , although the SSL certificate is signed properly by networksolutions , each time the pages are loaded it still displays an ...
4
votes
2answers
3k views

How can my organization become a Root CA?

I'm the founder of a little non-profit French organization. Currently, we're providing free web and shell hosting. Is there a way to become a Trusted Certificate Authority, in order to give free SSL ...
2
votes
2answers
82 views

Verifying that a user comes from a 'partner' site?

We're building a Drupal module that is going to be given to trusted 'corporate partners'. When a user clicks on a link, he should be redirected to our site as if he's a logged in user. How should I ...
0
votes
1answer
531 views

Example sites which use UCC certificates

Can anyone point me to a few sites that make use of a UCC (SAN) certificates? I tried to search for this but found a lot of information about UCC certficates without any examples. As a sanity check ...
2
votes
2answers
3k views

Mod Rewrite - directing HTTP/HTTPS traffic to the appropriate virtual hosts

I have an Apache2 web server (v. 2.2.16) running on Debian hosting three virtual hosts. The first two hosts are HTTP only (server1 and server2). The last host is HTTPS only (server3). My virtual host ...
3
votes
2answers
326 views

The same user from different IP-addresses?

Has anybody encountered the situation when the same user from the same session ID and the same browser requested 2 different scripts on the same webserver inside the duration of 30 sec from two ...
0
votes
3answers
58 views

I seek information about adding SSL to a website [closed]

Does anyone have any links or advice about adding SSL to a website?
5
votes
1answer
1k views

Redirect from SSL HTTPS to HTTP (NO SSL)

Many of my visitors have bookmarked my site already with https://mydomain.com. Under the bad advice of a programmer I have put my whole site (Joomla) using SSL. I do not sell anything or provide any ...
8
votes
3answers
3k views

Forcing SSL and www in .htaccess

I'm looking for a way to force SSL and www. I've been able to force both separately but together I keep running into redirection issues. The following code works when handling a URL in this format: ...
0
votes
4answers
643 views

Is there a free way to SSL certify my local website?

I'm basically trying to setup my local website with SSL. All I need to do is certify it, but couldn't find a free way to do it. Most websites, like GoDaddy for instance, charge to certify your ...
4
votes
1answer
8k views

Properly force SSL with .htaccess, no double authentication

I'm trying to force SSL with .htaccess on a shared host. This means there I only have access to .htaccess and not the vhosts config. I know you can put a rule in the VirtualHost config file to force ...
3
votes
2answers
1k views

SSL certificate - which one to buy? [duplicate]

Possible Duplicate: SSL certificate provider Hello, I'm trying to set up Https for my e-commerce site on webfaction hosting. Was trying to buy SSL certificate from godaddy.com which has ...
4
votes
2answers
747 views

Impact of migrating home page from HTTP to HTTPS on search results

I've had to change one of my site's home page to HTTPS from HTTP. I had plenty of links coming into the HTTP page and was performing well in Google against many of my targeted search phrases. I did a ...
2
votes
2answers
644 views

EV SSL Certificates - does anyone care?

Is any one aware of any data or studies from an impartial source that show the impact of EV SSL certificates on customer behavior? I've been unable to find any such studies. If an EV SSL certificate ...
0
votes
4answers
1k views

Best way to have both HTTP and HTTPS communication in a web application?

I am considering using both HTTP and HTTPS in a web application and I am looking for tips to accomplish this best. The application will run under Tomcat. I have also seen the following about HTTPS ...
3
votes
1answer
242 views

Should every page on every site be behind SSL?

This question stemmed from a discussion here: Ad networks that will serve via https? My question to the OP was "is it necessary to have every page behind SSL?" Admittedly at the time of posting this ...
5
votes
2answers
844 views

Ad networks that will serve via HTTPS?

I've built a website with 160K page views per month that serves every page over HTTPS. The recent FireSheep news will probably increase the adoption of "HTTPS everywhere" but it's been very hard to ...
2
votes
2answers
298 views

Security - DiscoverCard.com

I have a security, SSL question about http://discovercard.com/ When you first go to Discover Card's Home Page you are able to type in your user name and password without the website being protected ...
1
vote
1answer
401 views

YouTube Embed SSL Errors

Anyone else have problem using a YouTube Embed Code on a https site? The security warning pops up in Internet Explorer telling your users they are loading unsecured data on a secure site. YouTube ...
1
vote
1answer
192 views

Do you want to include your registrant information in third party Bulk Whois requests?

I'm buying a SSL certificate online for the first time. I have this option... Include your registrant information in third party Bulk Whois requests? What does it exactly mean ? What's Buil Whois ...
5
votes
1answer
2k views

Can I expect browsers to cache static content served over SSL encryption?

With all the talk about FireSheep I am thinking of switching my web applications to use full https accross the entire site. However, I am concerned about caching. I use a lot of JavaScript, CSS files, ...
2
votes
1answer
1k views

How to set the Bit Length when generating SSL Certificat with Java keytool?

I'm going to create a SSL Certificate so I can use https on my web site. I have to generate a Certificate Signing Request (CSR) and I did generate such a file with the Java keytool following the guide ...
8
votes
3answers
3k views

Google indexes my site as https as opposed to the correct http

Over the last month, the home page of my website hosted on Media Temple's grid server and has been appearing in google listings as an https website. I have never requested or needed the extra ...
22
votes
4answers
3k views

Is using only https bad in a SEO perspective?

I would like to set up a new business site. I plan to direct www.example.com to example.com and only use that domain. My plan is also to only use https and not http. Does this affect the SEO for the ...