We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [http]

HTTP Stands for "Hyper Text Transfer Protocol", and is the protocol that applications use to access documents/webpages/data from the world wide web.

Filter by
Sorted by
Tagged with
55
votes
12answers
6k views

What is the benefit of forcing a site to load over SSL (HTTPS)?

Let's say I have a large content-only site; no login or logout, no usernames, no email addresses, no secure area, nothing secret on the site, nada. People just come to the site and go from page to ...
45
votes
6answers
10k views

When webservers send a page, why don't they send all required CSS, JS, and images without being asked?

When a web page contains a single CSS file and an image, why do browsers and servers waste time with this traditional time-consuming route: browser sends an initial GET request for the webpage and ...
21
votes
3answers
10k views

What does WWW do?

To be clear: I am not asking whether or not I should use www in my url, or what the pros and cons are, that topic is well covered. I also wasn't sure if this was a Stack Overflow, Server Fault, or ...
17
votes
9answers
5k views

What is the need of methods like GET and POST in the HTTP protocol?

Can we not implement the HTTP protocol using just a request body and a response body? For example, the URL will contain request, which will be mapped to a function depending on programming language ...
17
votes
2answers
9k views

What are the Consequences for using Relative Location Headers?

According to the spec, Location headers used in a redirect require a server name HTTP/1.1 301 Moved Permanently ... Location: http://example.com/foo/baz/bar However, in 2012, most web browsers will ...
16
votes
5answers
5k views

Does it make sense to return a 410 instead of 404 when some page has been permanently removed?

Does it make sense to return a 410 instead of 404 when some page has been permanently removed? In this video, Matt Cutts says that Google treats them the same, but are there other reasons to implement ...
16
votes
1answer
72k views

What is HTTP Method PROPFIND used for?

I notice a series lines never seen before on my server access log that runs like this consecutively within the same one second: PROPFIND /images/flag.jpg HTTP/1.1 405 493 265 511 - LibreOffice ...
14
votes
5answers
9k views

How can I find out what other websites are hosted from my website IP address and why is that important from SEO point of view?

I heard that is important from a SEO perspective what other websites are hosted on the IP address on which my website is stored. Do other websites hosted on my server/VPS affect my search results in ...
14
votes
3answers
16k views

What is the purpose of GETting this external file?

A website I am visiting occasionally makes XHR requests to http://detectportal.firefox.com/success.txt which is a text/plain resource whose body contains the text success. I am unable to figure out ...
14
votes
1answer
4k views

Canonical URL for a home page and trailing slashes

My home page could be potentially linked as: http://example.com http://example.com/ http://example.com/?ref=1 http://example.com/index.html http://example.com/index.html?ref=2 (the same page is ...
13
votes
4answers
3k views

Loading main javascript on every page? Or breaking it up to relevant pages?

I have a 700kb decompressed JS file which is loaded on every page. Before I had 12 javascript files on each page but to reduce http requests I compressed them all into 1 file. This file is ~130kb ...
13
votes
4answers
8k views

What is the correct HTTP status code for: “This version of this API has been discontinued”?

I have a RESTful API. There are 3 versions of it: v1, v2, and v3. I am about to publish v4, and we have decided to discontinue v1, meaning that all requests to http://example.com/v1/resource will fail,...
12
votes
2answers
3k views

Considerations of the HTTP Content-MD5 Header

We are debating whether to use the Content-MD5 header. Pros: The CMS allows us to easily include it with minimal overhead (cached responses in 80%+ of the cases). It would add another layer of ...
12
votes
4answers
11k views

Interpretation of empty User-agent

How should I interpret an empty User-agent? I have some custom analytics code and that code has to analyze only human traffic. I have got a working list of User-agents denoting human traffic and bot ...
10
votes
2answers
1k views

Plus sign in front of URLs in user agents

I run a small web crawler and had to decide on what user agent to use for it. Lists of crawler agents as well as Wikipedia suggest the following format: examplebot/1.2 (+http://www.example.com/bot....
9
votes
1answer
5k views

What happens if you don't set cache-control header?

What happens if you don't set the cache-control header? Does HTTP specify a default behaviour that clients should follow or is it up to the clients to decide? In Chrome, I have seen some Javascript ...
8
votes
5answers
3k views

WWW.example.com or HTTP://example.com – which one is futureproof?

http://example.com www.example.com http://www.example.com example.com Which of these would you choose as your favourite to work with from 2016 onward? Which domain name would you mention to your ...
8
votes
3answers
5k views

HTTPS best practices for SEO and usability

Consider a page, http://example.com, which can be viewed both publicly and when a user authenticates. Now suppose you enable HTTPS for every page when a user logs into your website, but only when they ...
8
votes
1answer
183 views

Does the SPDY protocol eliminate the need for cookieless domains?

With plain HTTP, cookieless domains are an optimization to avoid unnecessarily sending cookie headers for page resources. However, the SPDY protocol compresses HTTP headers and in some cases ...
8
votes
0answers
774 views

Why is honest cloaking for Ajax considered bad practice? [closed]

Ajax-only websites are laden with many problems. Search engine invisibility is merely a small problem. They are also unbookmarkable and unlinkable and they break the functionality of back- and forward-...
7
votes
3answers
2k views

Can an HTTP status 400 be a substitute for a 410?

As I shift many URL's on my site from non-friendly to friendly, I came across an old URL that was used for testing that google later ended up scanning but now I no longer use the URL. Its in the ...
7
votes
4answers
15k views

Apache logs: “::1 … ”OPTIONS * HTTP/1.0" 200 -

Just looking at logs of a not-so-busy site on one of our Apache servers and notice tons of these in the log: ::1 - - [15/Apr/2011:12:11:40 -0700] "OPTIONS * HTTP/1.0" 200 - ::1 - - [15/Apr/2011:12:11:...
7
votes
1answer
24k views

IP Address headers (Remote_Addr) - When is this header sent by the browser?

I want to know when a browser includes the header - Remote_Addr in the HTTP request. I observed the request sent by the browser on loading stackoverflow.com, in the web console window of Firefox. ...
7
votes
2answers
129 views

HTTP: How to be deleted from search engines at a certain point in time in the future?

Is there a way to tell search engines, that a page they crawl should be included in the search results now, but have to be deleted at a certain time in the future? I have a website where hundreds of ...
7
votes
1answer
12k views

Locate sitemap at HTTP or HTTPS?

Our homepage has a 301 redirect from HTTP to HTTPS but all other pages on the site are on HTTP. (1) Should the sitemap be located at HTTPS and is there any problem if we: (2) include the HTTPS ...
7
votes
2answers
873 views

Proper status code for language redirection (301, 302, … 307)?

I have build a websites with multiple languages. The URLs look like: http://www.example.com/en/ http://www.example.com/de/ If the user access the main domain http://www.example.com/ the web server ...
6
votes
5answers
2k views

When responding with a HTTP 3xx Redirect status, should there still be a response body?

When a service is answering an HTTP request with a "3xx Redirect" status code response (and the accompanying Location header) should it still send a meaningful response body along with the response? ...
6
votes
1answer
691 views

Is there a Java-based web browser that doesn't follow hyperlinks properly?

Looking through my logs, I get this error a lot: A potentially dangerous Request.Path value was detected from the client (:). The error is usually due to someone navigating to a URL like this: ...
6
votes
2answers
511 views

HTTP for one part of the site, HTTPS for other

We have a site which is HTTP, but it has an admin part. How can we secure the admin part with HTTPS? For example, WordPress (which I know) is located at http://foo.com, but we want to have https://...
6
votes
1answer
310 views

Will it have a negative influence on search engine ranking if my main site is working over HTTPS but my blog isn't?

Suppose I have domain working https like https://www.example.com/ and my blog is working without https like http://blog.example.com/. Is that wrong from SEO or Google point of view?
6
votes
2answers
3k views

AMP Pages on HTTP or HTTPS?

Next month Google Search will integrate AMP pages. These are pages that are designed to work rapidly on mobile devices even when using a poor network connection. Should I host these AMP pages on a ...
6
votes
1answer
3k views

When to reply 400 Bad Request

According to www.w3.org, a Web server should reply with status code 400 Bad Request if: "The request could not be understood by the server due to malformed syntax. The client SHOULD NOT repeat ...
6
votes
1answer
3k views

Redirect from SSL HTTPS to HTTP (NO SSL)

Many of my visitors have bookmarked my site already with https://mydomain.com. Under the bad advice of a programmer I have put my whole site (Joomla) using SSL. I do not sell anything or provide any ...
5
votes
2answers
3k views

Should 304 Not Modified responses include the “Last Modified” header?

I've been using the most excellent http://redbot.org tool for testing have HTTP headers on my site correct (its custom code in PHP serving dynamic content - wanting to ensure it cached where possible -...
5
votes
2answers
277 views

How to check if a visitor is on my website?

I want to build a website that only one person at a time can visit. How would I accomplish this task? I looked at Web counters built in php, but I don't think this is the right solution. Is there an ...
5
votes
3answers
27k views

Pages that never finish loading: How to diagnose

Users occasionally complain, and we probably all occasionally see, a web page that never finishes loading. In Google Chrome the spinning circle will run forever, each browser has it's own version. ...
5
votes
1answer
5k views

Make server force Excel to hand over hyperlink to browser without trying to load the page itself

I am not sure if this is an Excel (SuperUser) or WebMasters question since I may have exhausted the server option. Use case Our site allows downloading a result list in XLS format. A hyperlink is ...
5
votes
1answer
9k views

HTTP Header Cache Time: s-maxage and max-age

I am setting up a CDN for my website, I found the following sample for adding to the 'httpd.conf' file, this is used to adjust the cache-time for client and CDN: ExpiresActive On ExpiresByType image/...
5
votes
2answers
111 views

Browser privacy improvement implications for websites

On https://panopticlick.eff.org/ EFF let you test the number of uniquely identifying bits that the browser gives a website. Among these are HTTP header fields such as User-Agent, Accept, Accept-...
5
votes
1answer
160 views

Cannot access my own web page

I am developing, learning and experimenting with php,html,javascript,flash and so on. Having web hosting and all of the cpanel, phpmyadmin and other utilities. One day, while updating information, ...
5
votes
1answer
436 views

My site fails to do content negotiation with Googlebot using the Accept-Language header

HTTP offers Content Negotiation (by reacting on the Accept-Language request header) to deliver translated representations of a resource under one URI. In January 2015 Google finally implemented this ...
5
votes
2answers
223 views

Is it an overkill to specify the accept-ranges header for small HTML pages?

I tested my site homepage through rigor.com (formerly zoompf.com) and they believe all resources should have an accept-ranges header, but since my HTML code size is under 20 KB (mostly under 10 KB), I ...
4
votes
2answers
4k views

What is the default behavior of Cache-Control

If no private nor public were defined in the cache-control, e.g. Cache-Control: max-age=31461276 What is the expected behavior?
4
votes
2answers
22k views

Where does the HTTP referer “applewebdata” come from?

My site uses a web stat service like Google Analytics, it uses a piece of javascript code to log what pages the visitor has visited and the refer url of each visit. I got some referer "applewebdata", ...
4
votes
1answer
901 views

Is a PHP POST using cURL from HTTPS site to HTTP endpoint encrypted securely?

I have a website residing on a domain with a valid SSL certificate that is fully using HTTPS. If I take form data from this site that is secured with an SSL and send it to a non-secure HTTP endpoint ...
4
votes
2answers
3k views

What benefits are there to having both HTTP and HTTPS protocols indexed by Google?

Using HTTPS seems to be standard and more and more sites are making the switch and redirecting all users from HTTP to HTTPS. However I have come across some large sites that keep HTTP and HTTPS both ...
4
votes
1answer
3k views

Does changing from HTTPS to HTTP kill my backlinks?

I had only my main page changed to HTTP to test out if I want to change from HTTPS to HTTP. All my backlinks are to my HTTPS site. Will I lose all of my backlinks and have to start over when switching ...
4
votes
1answer
157 views

Is there a way to return a response every x seconds or so to a single http request?

I'm wondering if it's possible to send a response every second or so to a single http request. Like for example the client makes an http request, then the server sends a space character every second. ...
4
votes
2answers
203 views

HTTP response for deleted or disabled items on ecommerce store

What HTTP response should you send when an item/category on your ecommerce site has been disabled or deleted? 410 looks correct for deleted products but not sure about something that has been disabled ...
4
votes
1answer
2k views

HTTP/HTTPS duplicate content 301 vs canonical

I thought I would ask a question as the amount of different sources that say this is right or that isn't right is unbelievable. Let me tell you my situation, at the moment, my boss wanted me to add ...