Secure Sockets Layer (SSL) is a cryptographic protocol that provides communications security over the Internet.

learn more… | top users | synonyms (2)

2
votes
1answer
39 views

cPanel SSL installation

I've tried transferring SSL issued by GoDaddy to Linux based server. The website was originally hosted in Windows. After the installation is completed, I got a message like this in cPanel: ...
0
votes
0answers
20 views

Migrate a ASP.NET web service from http to https. How to create a SSL certificate that works in test environment on IIS 7.5?

I have a question regarding a web service, http and https. First of all, there is a quite similar question with an accepted answer on StackOverflow. Like the questioner on SO, I have a simple working ...
3
votes
3answers
45 views

HTTPS and HTTP URLs point to different places?

I own and use a domain for a project. When I type in my domain preceeded by HTTPS instead of HTTP, I am re-directed to a compromising website. How is this possible? Did somebody buy the HTTPS ...
2
votes
0answers
15 views

Measuring percentage of visitors connecting over https [duplicate]

Does Google Analytics expose information about the connection protocol used by site visitors? I don't see any option in the customization section... is this something I'd have to use a custom variable ...
1
vote
1answer
55 views

Non HTTPS site is indexed as HTTPS in Google Search

I have hosted a site over shared hosting (ipage) and not have setup SSL certificate (which I don't need), but some how Google have indexed it as HTTPS link which popup security error on opening it. ...
2
votes
2answers
60 views

Any reason not to buy SSL certificates from a reseller?

Is there any reason to buy an SSL certificate directly from the host (for $49, for example), instead of through a well-known reseller, for only $10.95? Specifically in my case, I just need to ...
11
votes
5answers
522 views

Force Using SSL on Site now?

I am starting to see a majority of websites starting to use SSL as a standard practice for viewing the website securely now thanks to the revelations of Edward Snowden about the NSA surveillance that ...
1
vote
2answers
23 views

eCommerce checkout security

I'm developing an eCommerce site and using SagePay as a card processor. Customers will enter their delivery/invoice details into a form which is then submitted to a checkout page. This page encrypts ...
1
vote
1answer
128 views

Where to place web.xml outside WAR file for secure redirect?

I am running Tomcat 7 and am deploying a bunch of applications delivered to me by a third party as WAR files. I'd like to force some of those apps to always use SSL. (All the "SSL" apps are in one ...
9
votes
3answers
520 views

Does SSL really matter for most websites?

I've been pretty paranoid about learning to "do security right" for this site I'm building (first non-trivial site I've made), and I've noticed something that bothers me: SSL. I've read plenty of ...
3
votes
1answer
63 views

Serving WordPress menu links in only HTTPS or HTTP depending on how it's accessed

I have a WordPress site which uses WordPress HTTPS to enable SSL when users access it via that protocol. However, currently the menu links point back to the HTTP version. I want users to be linked ...
0
votes
0answers
29 views

HTTPS redirect to HTTP not working with 'www' subdomain

I have 2 rules on my site: one to force the www subdomain, and another to force the HTTP protocol: RewriteEngine On RewriteBase / RewriteCond %{HTTPS} =on RewriteRule ^ ...
0
votes
1answer
13 views

Apache mod_rewrite SSL vs Non-SSL

I have my site setup with two conf files (one for SSL and one for Non-SSL ) The two confs are at this gist -> https://gist.github.com/akinsgre/9645179 The Non-SSL configuration works fine. When ...
14
votes
2answers
10k views

Is there a way of using HTTPS with Amazon's CloudFront CDN and CNAMEs?

We use Amazon's CloudFront CDN with custom CNAMEs hanging under the main domain (static1.example.com). Although we can break this uniform appearance and use the original ...
3
votes
4answers
6k views

How can I pass referrer header from my https domain to http domains?

My website is 100% https. I have links to other http domains. The referrer header is not set when linking from a https page to a http page. From http://en.wikipedia.org/wiki/HTTP_referrer If a ...
0
votes
0answers
22 views

HTTPS connections for Revive (formely Openx)

I have installed Revive Adserver 3.0.2 (formely Openx Adserver) and everything works fine. But, only if my website its accessed using standard conexion (http). If my website its accessed usin https ...
23
votes
5answers
2k views

Are the different types of SSL certificates a bit of a scam?

I'm looking into getting a few SSL certificates for domains to cover the following: autodiscover.example.com remote.example.com www.example.com Wildcard certificates are too expensive, so I'm ...
3
votes
1answer
801 views

Enabling SSL on Apache2 causes address already in use error

My server works just fine on a normal Apache2 install. Now, I'm trying to install subversion on this server using a guide I found on the net called: Installation of Subversion on Ubuntu, with Apache, ...
1
vote
0answers
30 views

Does the server type matter when purchasing an SSL certificate from Network Solutions for NodeJS?

I am running an instance of ExpressJS using NodeJS and wish to have it start using HTTPS. My company purchases SSL certificates through Network Solutions. When trying to give them my CSR, Network ...
3
votes
1answer
72 views

What steps are required to enable SSL on Apache2 with Ubuntu?

I am developing a strategy game for web where there there will be a lot of client-server traffic for sending attacks, moves, etc. Right now I send messages from the client to the server via HTTP, and ...
6
votes
1answer
76 views

If a website is accessed on HTTPS instead of HTTP, should the URLs on the sitemap be HTTPS or HTTP?

I have changed my website from HTTP to HTTPS. At this moment, I have the next rewrite rule working to redirect calls for HTTP to HTTPS: RewriteEngine On RewriteCond %{SERVER_PORT} 80 RewriteRule ...
2
votes
1answer
34 views

Can I get source URL from Google search if I switch to HTTPS myself?

HTTPS cloaks the keywords, but I've read that by enabling HTTPS on my site I may at least get the source URL's - if the browser goes from HTTPS -> HTTPS it does not drop the source url in the packet ...
0
votes
1answer
25 views

Setting up WordPress protocol using Softaculous & Namecheap

I am setting up WordPress on my new Namecheap domain/hosting account and the site I am building will eventually be offering items for sale (a small personal business site selling vintage items). I'm ...
6
votes
3answers
476 views

When redirecting from http to https in a shop site, which status code should I use?

On a shop website, when "Pay now" is clicked we perform a header redirection to the same URL, just an SSL secured https version. In such a common scenario, should we use a permanent (301), a ...
0
votes
0answers
52 views

Finding different Windows XP Service Packs via User-Agent string

I am planning to get rid of the SHA1 certificate signing algorithm in our certificates and switch over to SHA-256. Problem is, that Windows XP (before SP3) is not supporting this. Therefore I need to ...
2
votes
2answers
584 views

EV SSL Certificates - does anyone care?

Is any one aware of any data or studies from an impartial source that show the impact of EV SSL certificates on customer behavior? I've been unable to find any such studies. If an EV SSL certificate ...
2
votes
2answers
78 views

How can I prevent HTTPS on another domain from wrongly showing on my HTTP-only domain?

So, I have a blog at domain.com. This blog is HTTP-only because I would gain almost nothing from adding SSL support. I have a web service now that I want to enable SSL support on that runs on the same ...
5
votes
4answers
1k views

“Not Provided” keywords from Google search: If your site uses https, does Google always send the keywords in the referrer?

Over the last two years the number of "keyword not provided" referrals from Google Search has grown to close to 30% for my websites. Google does not send the keyword in the referer URL when the user ...
2
votes
3answers
51 views

Would a self-signed certificate impact my site for search engines?

Would a self-signed certificate impact my site for search engines? By that I mean, do robots refuse to index sites with self-signed certificates?
2
votes
1answer
49 views

Intermittent SSL errors

I have a Facebook app hosted on SSL. Some people get "Connection not trusted" when using the app. I do not get the error. I have switched between secure browsing and not using Facebook settings, and ...
0
votes
2answers
66 views

Keep a Servlet/JSP web site always on SSL?

How to I keep a site always on SSL with padlock symbol always exists. Is there any way to optimize the page for SSL in JSP and Servlets ? Just tell about jsp and servlet optimization so answer do not ...
1
vote
1answer
35 views

Why do CDNs charge so much for private SSL? [closed]

I've been looking at various CDN services, and many of them seem to charge a pretty hefty fee compared to the free shared SSL offering. One in particular, CDN77, is offering private SSL for $700/year. ...
0
votes
0answers
31 views

How to overcome duplicate content SEO impact when enforcing https (SSL) site wide on an existing site [duplicate]

We're about to move a large existing site to https (SSL). I was a little concerned after reading this thread. Has anyone else experienced a negative impact when transitioning from http to https? ...
2
votes
2answers
894 views

SSL certificate - which one to buy? [duplicate]

Possible Duplicate: SSL certificate provider Hello, I'm trying to set up Https for my e-commerce site on webfaction hosting. Was trying to buy SSL certificate from godaddy.com which has ...
14
votes
5answers
11k views

Why is godaddy HTTPS/SSL certification so much cheaper than digicert, thawte, and verisign?

I am a novice on HTTPS/SSL but GoDaddy charges $12.99 and Digicert, thawte, and Verisign charge $100-1000+ for SSL certificates. I must be missing something on the quality of the encryption or ...
1
vote
1answer
95 views

SSL works on https://dedicatedip but not https://domain

My SSL certificate works on my apache web server but only when I do https://Dedicated_vps_ip. When I do https://domain.com it just doesn't work. I've tried almost everything. What am I doing wrong? ...
1
vote
2answers
36 views

SSL issues on my website

I'm running a XenForo website and I am now getting SSL security issues. I'm not so experienced in SSL, so I'm hoping you guys can provide some clarity on them. I was thinking that they probably had ...
2
votes
0answers
100 views

IIS 7.5 and authenticating client certificates

I am trying to understand if the functionality I am seeing is how client certs and SSL is supposed to work, or if I've done something wrong. I have a site running under IIS 7.5 that is using a cert ...
2
votes
2answers
60 views

Running my site using https and a load balancer

I currently have two webservers behind a load balancer that are running my websites. I'm considering buying an SSL certificate for one of my websites and converting it to https. What mechanics to I ...
5
votes
2answers
409 views

HTTP for one part of the site, HTTPS for other

We have a site which is HTTP, but it has an admin part. How can we secure the admin part with HTTPS? For example, WordPress (which I know) is located at http://foo.com, but we want to have ...
1
vote
1answer
307 views

Remove SSL from Google Search results

I am working on a WordPress site that serves up HTTP pages statically. The problem is that some of the pages are shown as HTTPS in Google Search results. For instance, if the search term "Example ...
0
votes
1answer
32 views

Revoked certificate causes browser alerts to not trust website when accessed via SSL

I revoked the certificate for my website and now every time I navigate to its SSL version, e.g. https://example.com, I get an alert from all browsers that the site should not be trusted. How can ...
0
votes
0answers
16 views

Should I use HTTPS for my WordPress blog? [duplicate]

In general I am aware of what SSL does and how, but I'm not exactly sure as to what's the accepted custom, i.e. whether I actually am supposed to use it for my blog. There will be no other users than ...
2
votes
1answer
243 views

Use SSL on Heroku without paying Heroku for SSL?

In this post, the author suggest a way to get SSL on Heroku without paying Heroku for it: Pay Cloudflare for premium service, and get SSL support with it. Create a CNAME in cloudflare that points to ...
1
vote
1answer
56 views

Mixing self signed certs with traditional SSL

I have a traditional SSL cert going to a subdomain secure.mydomain.com on my domain. My host required me to have a dedicated IP in order to do this. I would also like to use HTTPS on my site for when ...
3
votes
3answers
1k views

Do internal intranet websites need to be secure?

The question is in the title. Does an internal site need to have https security? For example we have an internal site that handles our client's license keys -- do we need for that to be secure since ...
1
vote
1answer
41 views

Shared web hosting issue where Google is incorrectly indexing https content from another website

I am using shared hosting from a reasonably well known Australian web hosting company and have come across an unusual issue where Google is indexing pages on my website from another website on the ...
3
votes
1answer
84 views

Multiple IP addresses for one SSL certificate

Is it possible to register an SSL Certificate for Multiple IP addresses? This is needed for one of my sites; which runs on two different servers with different IP addresses. One server is live; while ...
61
votes
4answers
7k views

How do I transition to SSL without affecting PageRank?

Here at Stack Exchange we're working on moving all traffic to SSL. The reason we're not doing logged-in-users only is that one side of the login divide would suffer a redirect from Google every time. ...
4
votes
1answer
169 views

“https://” refers to random site, “http://” is broken, but “http://www” works

I'm running a website which is acting extremely strange. At the time of writing, this link works: http://www.example.com This link doesn't: http://example.com But it does work if you copy/paste it ...