Secure Sockets Layer (SSL) is a cryptographic protocol that provides communications security over the Internet.

learn more… | top users | synonyms (2)

62
votes
4answers
8k views

How do I transition to SSL without affecting PageRank?

Here at Stack Exchange we're working on moving all traffic to SSL. The reason we're not doing logged-in-users only is that one side of the login divide would suffer a redirect from Google every time. ...
7
votes
2answers
4k views

How to prevent access to website without SSL connection?

I have a website that has an SSL certificate installed, so that if I access the website using https instead of http I will be able to connect using a secure connection. However, I have noticed that I ...
10
votes
6answers
627 views

SSL certificate provider

I need a SSL certificate for a new site I'm building and I have to choose a SSL provider. What to look for when choosing and what's your experience dealing with them? Thanks!
19
votes
3answers
3k views

What are the benefits of a more expensive SSL certificate?

I've been comparing prices of different SSL certificates and found a massive difference in prices between different providers. If we take ...
5
votes
3answers
6k views

Google Analytics: How can I track between http:// and https:// profiles for a domain?

I'm trying to set up tracking on a project that I'm working on. The main site is at http://www.example.com/ The order page is at https://www.example.com/index.php Currently they have two ...
4
votes
2answers
707 views

Impact of migrating home page from HTTP to HTTPS on search results

I've had to change one of my site's home page to HTTPS from HTTP. I had plenty of links coming into the HTTP page and was performing well in Google against many of my targeted search phrases. I did a ...
7
votes
1answer
316 views

Should we get an EV Certificate?

Our regular SSL provider is offering EV certificates for under $US200, and it just so happens that the certificate for our B2B e-commerce site is expiring in a month (which should give us enough time ...
3
votes
4answers
2k views

Firefox reports HTTPS page to contain non-secure elements

When I visit our web site pages with IE over HTTPS, it reports the web site as protected (i.e. no elements are taken using HTTP). The same page, when loaded to Firefox, causes Firefox to complain that ...
25
votes
5answers
2k views

Are the different types of SSL certificates a bit of a scam?

I'm looking into getting a few SSL certificates for domains to cover the following: autodiscover.example.com remote.example.com www.example.com Wildcard certificates are too expensive, so I'm ...
22
votes
4answers
3k views

Is using only https bad in a SEO perspective?

I would like to set up a new business site. I plan to direct www.example.com to example.com and only use that domain. My plan is also to only use https and not http. Does this affect the SEO for the ...
6
votes
2answers
603 views

Ad service that supports ssl (secure publishing)

Is there an add service like adsense that supports SSL ads? I wish to put ads on a secured (https) pages but Google Adsense doesn't support it. I know Adbrite works for text based SSL ads but I ...
3
votes
1answer
112 views

SSL: What are the differences between Domain Validation and Extended Validation Certificates?

I can get Extended Validation for cheaper than Domain Validation, yearly. What are the differences between them?
6
votes
6answers
5k views

Identify “non-secure” content IE warns about [closed]

As many know, if you serve a page over https and the content loads resources (images, stylesheets, js, SWF objects, etc) over http, older versions of Internet Explorer will show the user a warning ...
5
votes
1answer
1k views

Redirect from SSL HTTPS to HTTP (NO SSL)

Many of my visitors have bookmarked my site already with https://mydomain.com. Under the bad advice of a programmer I have put my whole site (Joomla) using SSL. I do not sell anything or provide any ...
2
votes
3answers
4k views

HTTPS page loading non-https images

I have a https site which links to images from a cdn, as well as user-generated image links that are not https. I get errors like this in console: The page at https://site.com displayed insecure ...
2
votes
1answer
72 views

Duplicate content caused by HTTPS pages

I have a landing page that can be called by HTTP and also by HTTPS. The canonical URL links to the HTTP version. In some comments I have read that the HTTPS version is never read by a Googlebot. Is ...
2
votes
2answers
3k views

Apache2: How to host apps at different ports with SSL?

I'm trying to achieve quite simple task actually. I bind application to a port, I enable SSLEngine at each VirtualHost entry for that port. Everything works beside one thing: if you type url that ...
1
vote
2answers
116 views

SSL Certification on both www and no-www domains

We've got our website running and HTTPS / SSL works just great. EXCEPT: when users enter http://www.mydomain.com and then enter the secure area and get directed to https://www.mydomain.com it works ...
16
votes
6answers
20k views

Is unique IP address a must for SSL?

The shared hosting company told me that if I buy an IP address then it will be applicable for the addon domains too. What does it mean? Then the SSL certificate won't work since there will be more ...
8
votes
2answers
3k views

How to serve static content without https in a secure site?

I want to serve static content from my site but my site is https-only. My static http server only serve http content (non https) but many IE users are complaining about being unable to log into. What ...
7
votes
5answers
216 views

What do I need to do to enable my site to accept credit cards?

I want to store my customers' credit card information in my database so that they can quickly check out again without having to re-enter their info. What do I need to know about security/https/etc to ...
11
votes
2answers
187 views

Choosing which domain to secure

We've got a website that is served on both www.example.com and just example.com - we've never done any sort of forcing users from one domain to the other, so if they land on example.com then that's ...
10
votes
4answers
568 views

Does SSL really matter for most websites?

I've been pretty paranoid about learning to "do security right" for this site I'm building (first non-trivial site I've made), and I've noticed something that bothers me: SSL. I've read plenty of ...
7
votes
2answers
346 views

Looking for SSL certificates (first time)

I need to buy SSL certificates and it is the first time. 1) My option would be the "cheapest ones". What am I going to risk, what kind of service quality I'm going to lose if I buy the cheapest ? Are ...
14
votes
2answers
460 views

If I need HTTPS / SSL encryption on my web site, does it matter who I get my certificate from?

If I need HTTPS / SSL encryption on my web site, does it matter who I get my certificate from? Are some SSL certificate vendors better than others? If so, why?
10
votes
5answers
2k views

HTTPS for entire site

I'm working on a fairly standard web site with public content plus personal/customized content for registered users. I know I need to use HTTPS when users are logging in or sending credit card ...
6
votes
3answers
4k views

HTTPS best practices for SEO and usability

Consider a page, http://example.com, which can be viewed both publicly and when a user authenticates. Now suppose you enable HTTPS for every page when a user logs into your website, but only when they ...
5
votes
2answers
821 views

Ad networks that will serve via HTTPS?

I've built a website with 160K page views per month that serves every page over HTTPS. The recent FireSheep news will probably increase the adoption of "HTTPS everywhere" but it's been very hard to ...
4
votes
1answer
215 views

Redirect non-www to www while preserving protocol

I am aware of the fact that there are tons of questions in this section and in server fault dealing with re-directions from non-www to www URLs. But I couldn't find one dealing with this issue while ...
3
votes
1answer
303 views

HTTP and HTTPS impacts on SEO

I have a website http://www.domain_1.com/ hosted in a shared webserver. I have used SSL for another website https://www.domain_2.com/ on the same server. Due to some technical limitations (single ...
8
votes
4answers
545 views

free SSL certificates?

how comes that some SSL certificates are free ? What does that mean ? Are they secure or not ?
4
votes
1answer
186 views

“https://” refers to random site, “http://” is broken, but “http://www” works

I'm running a website which is acting extremely strange. At the time of writing, this link works: http://www.example.com This link doesn't: http://example.com But it does work if you copy/paste it ...
2
votes
1answer
144 views

Does an SSL Certificate actually require a dedicated IP?

My web host which I have been with for at least going on 8 years now is requiring a dedicated IP address, which is $3.33/Month now for assigning a SSL Certificate with my web hosting package and ...
2
votes
1answer
455 views

Use SSL on Heroku without paying Heroku for SSL?

In this post, the author suggest a way to get SSL on Heroku without paying Heroku for it: Pay Cloudflare for premium service, and get SSL support with it. Create a CNAME in cloudflare that points to ...
13
votes
1answer
574 views

Cost of using SSL

I am wondering on the cost of using SSL sitewide. It would be for a standard LAMP site. I know that this will be dependent on the many factors but, can some give me an 'average' or 'guesstimate!'. By ...
7
votes
2answers
416 views

Using wildcard certificates

Can I buy a wildcard certificate to use the same SSL certificate on multiple domains? For example, www.example.com, www.example.org and www.example.net (on different hosting services)? If I can, Is ...
6
votes
2answers
153 views

Does https site needs extra configuration after installation of SSL certificate?

I recently developed an incentive website for a European bank, and one of the requirements was SSL - the website displays some personal customer data (though no financial or really sensitive data). ...
5
votes
3answers
319 views

SSL versus EV SSL

As I understand it, SSL certificates verify the connection between the host and the browser, preventing MITM attacks. Is it true that EV SSL verifies the host itself, thus preventing (in theory) ...
4
votes
1answer
80 views

How can I serve all resources under HTTPS instead of HTTP without changing their URLs in the HTML code

I know that by using an .htaccess file I can redirect everyone to https://. However, my SSL certificate complains if all the content isn't served under HTTPS. Is there a way to convert all the ...
4
votes
2answers
352 views

Google Analytics HTTP vs HTTPS

I want to use Google Analytics on a website that uses both HTTP and HTTPS that works as explained below: Secure pages accessed through https://mydomain.com/secure/* are always on HTTPS. Any access ...
2
votes
1answer
208 views

Will Googlebot crawl HTTPS URLs that are encrypted by SSL?

This question was asked at StackOverflow, but it doesn't have good references. Does Googlebot crawl HTTPS? (Please provide references.)
2
votes
2answers
1k views

https:// search results appearing on Google for purely http:// site

I started weeding through my site's search results from Google today, using a site: search, to determine if there are any links that cause 404s and thus need redirecting. To my amazement I noticed ...
1
vote
2answers
92 views

Search for my web site returns HTTPS results

My home page is set to Google and Google adds ?gws_rd=ssl to it. When I type search term form my site into search box Google returns bunch of indexes (different pages within my site) that starts with ...
1
vote
0answers
50 views

Are there any usable free options for SSL certificates? [closed]

I'm aware that there are old questions in the same vein, but they're from ~2010 and everything has moved on a lot since then. Also, a caveat below excludes the common old answer. Background: I've got ...