Secure Sockets Layer (SSL) is a cryptographic protocol that provides communications security over the Internet.
5
votes
2answers
2k views
How to prevent access to website without SSL connection?
I have a website that has an SSL certificate installed, so that if I access the website using https instead of http I will be able to connect using a secure connection.
However, I have noticed that I ...
9
votes
6answers
525 views
SSL certificate provider
I need a SSL certificate for a new site I'm building and I have to choose a SSL provider. What to look for when choosing and what's your experience dealing with them?
Thanks!
6
votes
1answer
267 views
Should we get an EV Certificate?
Our regular SSL provider is offering EV certificates for under $US200, and it just so happens that the certificate for our B2B e-commerce site is expiring in a month (which should give us enough time ...
2
votes
4answers
2k views
Firefox reports HTTPS page to contain non-secure elements
When I visit our web site pages with IE over HTTPS, it reports the web site as protected (i.e. no elements are taken using HTTP). The same page, when loaded to Firefox, causes Firefox to complain that ...
21
votes
5answers
1k views
Are the different types of SSL certificates a bit of a scam?
I'm looking into getting a few SSL certificates for domains to cover the following:
autodiscover.example.com
remote.example.com
www.example.com
Wildcard certificates are too expensive, so I'm ...
19
votes
3answers
2k views
What are the benefits of a more expensive SSL certificate?
I've been comparing prices of different SSL certificates and found a massive difference in prices between different providers.
If we take ...
6
votes
5answers
4k views
Identify “non-secure” content IE warns about
As many know, if you serve a page over https and the content loads resources (images, stylesheets, js, SWF objects, etc) over http, older versions of Internet Explorer will show the user a warning ...
5
votes
2answers
396 views
Ad service that supports ssl (secure publishing)
Is there an add service like adsense that supports SSL ads? I wish to put ads on a secured (https) pages but Google Adsense doesn't support it. I know Adbrite works for text based SSL ads but I ...
4
votes
1answer
640 views
Redirect from SSL HTTPS to HTTP (NO SSL)
Many of my visitors have bookmarked my site already with https://mydomain.com. Under the bad advice of a programmer I have put my whole site (Joomla) using SSL.
I do not sell anything or provide any ...
1
vote
3answers
1k views
HTTPS page loading non-https images
I have a https site which links to images from a cdn, as well as user-generated image links that are not https.
I get errors like this in console:
The page at https://site.com displayed insecure ...
1
vote
2answers
86 views
SSL Certification on both www and no-www domains
We've got our website running and HTTPS / SSL works just great.
EXCEPT: when users enter http://www.mydomain.com and then enter the secure area and get directed to https://www.mydomain.com it works ...
0
votes
2answers
866 views
Apache2: How to host apps at different ports with SSL?
I'm trying to achieve quite simple task actually.
I bind application to a port, I enable SSLEngine at each VirtualHost entry for that port. Everything works beside one thing: if you type url that ...
6
votes
5answers
203 views
What do I need to do to enable my site to accept credit cards?
I want to store my customers' credit card information in my database so that they can quickly check out again without having to re-enter their info. What do I need to know about security/https/etc to ...
10
votes
2answers
168 views
Choosing which domain to secure
We've got a website that is served on both www.example.com and just example.com - we've never done any sort of forcing users from one domain to the other, so if they land on example.com then that's ...
8
votes
2answers
2k views
How to serve static content without https in a secure site?
I want to serve static content from my site but my site is https-only. My static http server only serve http content (non https) but many IE users are complaining about being unable to log into.
What ...
6
votes
2answers
317 views
Looking for SSL certificates (first time)
I need to buy SSL certificates and it is the first time.
1) My option would be the "cheapest ones". What am I going to risk, what kind of service quality I'm going to lose if I buy the cheapest ? Are ...
20
votes
4answers
2k views
Is using only https bad in a SEO perspective?
I would like to set up a new business site. I plan to direct www.example.com to example.com and only use that domain. My plan is also to only use https and not http. Does this affect the SEO for the ...
13
votes
2answers
413 views
If I need HTTPS / SSL encryption on my web site, does it matter who I get my certificate from?
If I need HTTPS / SSL encryption on my web site, does it matter who I get my certificate from? Are some SSL certificate vendors better than others? If so, why?
3
votes
1answer
113 views
redirect non-www to www while preserving protocol
I am aware of the fact that there are tons of questions in this section and in server fault dealing with re-directions from non-www to www URLs. But I couldn't find one dealing with this issue while ...
9
votes
5answers
2k views
HTTPS for entire site
I'm working on a fairly standard web site with public content plus personal/customized content for registered users. I know I need to use HTTPS when users are logging in or sending credit card ...
5
votes
3answers
4k views
HTTPS best practices for SEO and usability
Consider a page, http://example.com, which can be viewed both publicly and when a user authenticates. Now suppose you enable HTTPS for every page when a user logs into your website, but only when they ...
4
votes
1answer
579 views
Ad networks that will serve via https?
I've built a website with 160K page views per month that serves every page over https. The recent FireSheep news will probably increase the adoption of "https everywhere". But it's been very hard to ...
13
votes
1answer
443 views
Cost of using SSL
I am wondering on the cost of using SSL sitewide. It would be for a standard LAMP site. I know that this will be dependent on the many factors but, can some give me an 'average' or 'guesstimate!'. By ...
6
votes
2answers
113 views
Does https site needs extra configuration after installation of SSL certificate?
I recently developed an incentive website for a European bank, and one of the requirements was SSL - the website displays some personal customer data (though no financial or really sensitive data).
...
6
votes
2answers
290 views
Using wildcard certificates
Can I buy a wildcard certificate to use the same SSL certificate on multiple domains? For example, www.example.com, www.example.org and www.example.net (on different hosting services)?
If I can,
Is ...
4
votes
3answers
263 views
SSL versus EV SSL
As I understand it, SSL certificates verify the connection between the host and the browser, preventing MITM attacks. Is it true that EV SSL verifies the host itself, thus preventing (in theory) ...
