Tag Info

New answers tagged

2

For an Azure website not running in a VPS, you just need to supply a .pfx file (this step of the tutorial). You can use the Utility running on any Windows machine (including your local workstation) to create the .pfx file as described in the tutorial.


5

Google ranks HTTPS sites higher. Well-configured HTTPS sites are also a lot faster (thanks to SPDY), and that also affects ranking. The HTTP site is considered separate from the HTTPS site, and to avoid duplicate content you need to pick one of the sites (normally the HTTPS one) as canonical. See here for more info on redirects, linking, and transitioning ...


0

Forcing access through HTTPS is in fact possible, besides being a required step in making your site MITM-, snooper- and PEBKAC-proof. It shouldn't be the responsibility of the user, that doesn't work. Encourage your users to use secure browsers instead. Forcing HTTPS is done through HSTS (HTTP Strict-Transport-Security). Basic HSTS is secure after the ...


1

Google has a site migration howto. A protocol change counts as url modification; this is the relevant section. The switch goes much like a regular HTTPS switch. Once your urls are made protocol-relative, and before you start redirecting, you should validate the https site in Google's webmaster tools. It's a separate site with its own sitemap. There is no ...


4

What webserver are you running on? Nginx To remove www in nginx do the following. if ($host = 'www.example.com' ) { rewrite ^/(.*)$ http://example.com/$1 permanent; } That will strip the www. To force https: rewrite ^ https://$server_name$request_uri? permanent; Along those lines. Apache Force https: RewriteEngine On RewriteCond %{HTTPS} ...


2

Google WMT feature to 'Add a site' asks users to enter a URL, and gives example 'www.example.com' - which is not helpful when trying to add an https site To add the https version of the site, just look at the URL in WMT for http version and change it from https://www.google.com/webmasters/tools/dashboard?authuser=0&siteUrl=http://www.domain.com to ...


0

google change of address tools: Note: The tool does not currently support the following kinds of site moves: subdomain name changes, protocol changes (from HTTP to HTTPS)


0

Qualys® SSL Labs offer an SSL client testsuite which also shows all the ciphersuites a connecting user agent supports. I don’t have “standard” MS Internet Explorer systems handy, but I know it depends on three things: The version and configuration of MSIE The version and configuration of the OS The version and configuration of SChannel (Windows’ built-in ...


1

https://en.wikipedia.org/wiki/SubjectAltName may be what you are looking for. Most CAs offer these, at least if you ask them.


2

First thing to do is decide whether you need to support Windows XP users using Internet Explorer 6. Check your visitor logs and consider that these users already have bigger security issues and may not be the most profitable, and they require a more complicated and expensive set-up. If you are okay with leaving XP + IE6 behind, you should use SNI (Server ...


3

There are only 3 types of SSL certs that I'm aware of. One of the problems of using multiple certificates is that each requires it's own IP address. While your web server may offer unlimited subdomains the number of IP addresses you have may be limited. A standard SSL certificate will only work for 1 domain, and it has to be the domain the certificate is ...



Top 50 recent answers are included