Questions tagged [https]

HTTPS is the secure version of the hypertext transfer protocol (HTTP). It usually uses port 443 and is powered by the TLS (formerly SSL) cryptographic protocol.

Filter by
Sorted by
Tagged with
6
votes
2answers
2k views

Do ISPs cache HTTPS web pages?

Provided I have not set cache-control header to private, can ISPs cache web pages (by respecting max-age) served over HTTPS? Sorry if I sound naive, but I wanted to know if ISPs somehow can cache and ...
1
vote
1answer
30 views

SSL certificate hostname does not match, but online validation says all is OK

I secured our server with Let's Enccrypt SSL certificate, which I installed with Certbot on Apache. It works great - I validated it with online SSL checkers. However, Filezilla FTP client always shows ...
1
vote
1answer
88 views

A modern global rewrite command for HTTPS websites without cname (www.) at all

I host a MediaWiki website on a shared server with Apache, MySQL and PHP. Up until today I used a CDN to deliver that website's content --- which required redirecting each webpage to a www. including ...
1
vote
1answer
61 views

Should I remove HTTP to HTTPS redirects to fix performance problems reported by Google Pagespeed Insights?

I have created a brand new website in which I publish various computing services I suggest to potential customers. As far as I know, no other website on the World Wide Web links to that website and ...
2
votes
1answer
237 views

“Insufficient HTTPS Coverage” in Google Search Console… for pages that are being redirected to HTTPS

I'm getting an "Insufficient HTTPS coverage on your site" error in my domain property in Google Page Experience, which is strange because my entire site uses HTTPS and has done so for a long ...
0
votes
0answers
18 views

get nginx proxy for https://hostname to work

I'm using nginx to proxy a site internal to our firewall. Right now the following urls work:     http://sitename (-> https://sitename.example.com)     http://sitename.example.com (-> https://...
2
votes
1answer
76 views

Most cost effective option for securing 1000+ websites (SSL)

My company manages well over 1000 sites for various clients. Currently, we are paying for a Standard DV certificate for each individual site ($94.99 from GoDaddy). We are easily spending over $100k ...
0
votes
0answers
12 views

How can you set up certificates for clients to use in to log into a webpage in comparison to a username and password? [duplicate]

I've relatively new here and in the website world. I recently saw that some webpages (eg. some banks) use certificates for logging in. An example of what I'm looking for is here - http://poczta....
3
votes
1answer
67 views

Force HTTP to HTTPS except one page accessed via HTTP

I'm trying to redirect a website to HTTPS, but there is one URL that needs to be accessed via HTTP. Currently I just have this in .htaccess: Redirect 301 / https://www.example.com I need to have the ...
1
vote
1answer
70 views

Google Domains won't redirect `http` to `https` when Bluehost handles the DNS and website

I have a website hosted on bluehost, but using a domain from Google domains. I am trying to force it to always redirect http://example.io -> https://example.io from the google domains site. However,...
1
vote
0answers
26 views

HTTP to HTTPS redirect causes critical chained request in Google Page Speed Insights

My WordPress website is configured to use HTTPS. After running the site through Google Page Speed Insights, the report shows a section labeled Avoid chaining critical requests 1 chain found Expanding ...
1
vote
1answer
25 views

How do I install an SSL certificate on Namecheap when it asks me to “Edit methods” for DNS validation?

I am at the screen above when adding SSL certificates for my domain in Namecheap, but I am completely lost on what to do next. I think it is saying to get a CNAME record, but there is no explicit ...
0
votes
2answers
62 views

Redirecting Old Domain to New Domain - Google SSL Warning

My client wanted his website republished under a new domain that was shorter. So we pointed the new domain to the website server and "forwarded" by 301 redirect from the old domain hosted on ...
1
vote
1answer
31 views

How can I migrate from a server with cPanel AutoSSL to one using Let's Encrypt without an interruption to my SSL coverage?

I've currently got a live website which is set up with it's SSL cert being provided by cPanels AutoSSL feature. I'm going to be moving my website to a VPS that is provisioned by Laravel Forge and set ...
2
votes
0answers
29 views

How do I install a wildcard SSL certificate on WHM using Let's Encrypt plugin and Cloudflare DNS?

I am using cPanel 92 on CentOS 7 and my domain.com's DNS zone is running on Cloudflare (free Cloudflare tier) and I'm having trouble getting my subdomains (of a subdomain) running over HTTPS. Security ...
9
votes
4answers
3k views

Do I have to pay a web hosting company for an SSL certificate?

I want to be able to host HTTPS in addition to HTTP and I thought I could simply buy a low cost SSL certificate and copy the certificate to my hosted website? But my service provider has a variety of ...
0
votes
2answers
61 views

SSL Certificate Validation after Upgrading Website

I've recently acquired a SSL certificate from a certificate authority called GlobalSign nv-sa. The certificate is already in use. What I am curious to know is what happens if I change major parts of ...
3
votes
1answer
102 views

Rewrite wildcard rule to redirect images that works with HTTP, HTTPS and Firefox HTTPS-Only mode

This set of rules causes the nolinks.jpg image to appear if anyone tries to link directly to an image from a remote site. It is working well but with the latest Firefox, the browser is forced to ...
2
votes
0answers
22 views

Websites not working on IOS after server move (only affecting sites with SSL)

I'm most of the way through moving from one server to another. Servers are more or less the same, newer one has a newer version of Plesk. Everything has gone very smoothly BUT now I check on Safari or ...
0
votes
0answers
235 views

Nginx: could not allocate new session in SSL session shared cache “SSL” while SSL handshaking

What to make of this error? I get it a few times a day, often in a clump. 14 of them yesterday, scattered throughout, but with a cluster of 9 within a few seconds of each other. My first thought was ...
2
votes
0answers
48 views

how to reduce SSL handshake time - localhost/self signed cert

We have one .net exe running on local machine and browser make one API to that running service with https://localhost:45235/getInfo. Actual getInfo API returns response in < 1 sec. But when browser ...
0
votes
1answer
42 views

iOS Safari not accepting certificates issued by custom CA

I'm trying to make iOS Safari accept an https website that runs a certificate I signed with my own CA. My CA cert is here: https://gist.github.com/BenMorel/014d7bd7802b75eec78b0bc0bad7e4e1 When I ...
2
votes
2answers
166 views

Redirecting bare domain to www doesn't when specifying http/https scheme

I've recently uploaded a website on a domain via Firebase hosting. Using the domain registrar (NameCheap) I've also applied a 301 redirect rule (via NameCheap. It's called "URL redirect record&...
1
vote
0answers
24 views

Invalid command 'SSLEngine', with “--enable-ssl” configured Apache

I built an Apache 2.2.32 server on Ubuntu from sources, and if I test my phpinfo() I see: './configure' '--prefix=/usr/local/php_7.2.25' '--with-apxs2=/usr/local/apache2/bin/apxs' '--with-mysqli=/usr/...
6
votes
1answer
131 views

HSTS affect on SEO

I do back-end work work for a couple of fairly knowledgeable people in the SEO field (i.e. not people off the street just claiming to be SEO experts). One of them is advising that HSTS improves SEO, ...
1
vote
0answers
29 views

HubSpot CMS site is not secure unless someone types in “www.”

so we connected our domain with HubSpot CMS. They only support SSL for subdomains, so when someone does not type in "www." they are prompted with a security warning. They told me I needed to ...
1
vote
0answers
96 views

OpenCart 2.3: Mixed content error in admin login blocking login

I just installed OpenCart 2.3 and tried to login into admin panel, but it is just refreshing the page. I checked both config.php and both are correctly stating https. Now what can I do to fix this. ...
0
votes
2answers
51 views

Can a webpage differ in content if 'http' is changed to 'https' or if 'www.' is added after 'http://' (or 'https://')?

When I use the Python package newspaper3k package and run the code import newspaper paper = newspaper.build('http://abcnews.com', memoize_articles=False) for url in paper.article_urls(): print(url)...
1
vote
1answer
30 views

GSC: Big changes in coverage of HTTP property after HTTPS migration. Is this acceptable?

Some weeks ago, I migrated a 500k-webpage site from HTTP to HTTPS I implemented the appropriate 301 redirection I removed the sitemap of the HTTP property within Google Search Console Today I found ...
-3
votes
1answer
58 views

Redirecting domains on https without creating a certificate for them?

I own, say, 100 domains. I want to add redirect for each of them to a new domain. And not only to a domain, but a custom query string. For instance domain1.example/url1 -> domain11.example/url2 ...
1
vote
0answers
52 views

HSTS compatible .htaccess redirect from non-www to www that preserves URL path [closed]

UPDATE: The redirect actually does work! The site is a friends site and I was coming up with solutions and sending them to him. Turns out his website is running Joomla. After further troubleshooting ...
2
votes
1answer
39 views

Is it worth changing external outbound links from http to https if the other site redirects properly?

Many of the outbound links on my site have changed but only from 'http' to 'https'. Do I need to add the 's' to all the links if they 301 redirect to HTTPS?
1
vote
0answers
32 views

Mixed content (http, https) fix

I am a digital marketing with enough HTML/CSS skill to be dangerous, correct problems, but also cause them. So I tend to stick to WordPress. I inherited an entirely static HTML site that I'm trying ...
1
vote
1answer
50 views

Will a .com SSL certificate cover a redirecting .com.ar domain?

we have a website with 2 different domains: www.example.com or example.com and www.example.com.ar or example.com.ar I want all requests redirected to www.example.com. I know I have to create two ...
0
votes
0answers
30 views

Set up SSL on NGINX

I'm having difficult setting up SSL on nginx running on Ubuntu. I have a .pfx, .crt, and .pem cert files to work with, but the documentation is for setting it up with .crt and .key files. The code ...
0
votes
1answer
107 views

Should I create a separate site in IIS to redirect (wildcard) from one domain to another?

We are moving domains and servers. I have newdomain.example set up on new server (SSL). I want to shut off old domain. I will get old domain pointed to new server. Is it better in IIS to add the ...
0
votes
2answers
119 views

How does Cloudflare do HTTPS for my site when I haven't provided them with an ssl certificate?

I setup cloudflare today. It only asked me to add its nameservers to my domain. After doing that I'm able to access my site at my domain name but it's now cloudflare's IP. This is all good and as ...
1
vote
1answer
680 views

Where is the Trusted Root Certification Authorities store located?

My webhost has installed an SSL certificate for my website. When I navigate to the website, it complains about not being secure. The error shown is This CA Root certificate is not trusted because it ...
0
votes
1answer
63 views

How to redirect an https site from www to non www

After adding an SSL certificate I want to 301-redirect all my site's URL variations to non-www ones. I tried creating a redirect from cPanel for all other variations. Every other URL variations ...
2
votes
1answer
345 views

Is letsencrypt compatible with DANE TLSA?

What is the relationship between letsencrypt and DANE TLSA? Can or should letsencrypt be used together with DANE TLSA? Is DANE TLSA a full replacement for letsencrypt [and any certificate authority (...
1
vote
2answers
44 views

All pages are not being redirected to HTTPS when accessed using HTTP

I'm running a Wordpress blog that has an issue with HTTPS redirect. Except home page, no other URL is being redirected to HTTPS if you visit via HTTP. I want to redirect all HTTP traffic to HTTPS. ...
0
votes
1answer
93 views

This server could not prove that it is LLLL.com; its security certificate is from *.dnsmadeeasy.com. This may be caused by a misconfiguration [closed]

I'm having difficulty figuring out why my site is giving this error only to some users (we just migrated the domain last night) https://DavidKim2020.com This is the error it's giving to some users: ...
1
vote
0answers
198 views

Google Search Console only reports URLs discovered in sitemap.xml on HTTP property which is redirected to HTTPS

The whole content of the website is running on HTTPS and WWW, while Google Search Console is reporting discovering URLs in the sitemap.xml only without https and www. However, there are no pages ...
-1
votes
1answer
31 views

Redirect https alias to http main domain (it is showing no private connection error)

Redirect https alias to http main domain (it is showing no private connection error) I have one domain alias www.domain2.example The main domain is www.domain1.example When someone enters to www....
2
votes
1answer
43 views

Duplicate content after moving from http to https

I move my wordpress blog from "http" to "https". I generate a sitemap that contains canonical urls with "https" and submit it to GSC. I used "rel=canonical" tag in all blog post urls. I also implement ...
2
votes
0answers
26 views

Allow users to point domains at web app - multi domain SSL

I have a web app, and when users sign up, we give them their own subdomain, e,g, user1.website.example We do this with a wildcard ssl for *.website.example However, users are requesting custom ...
1
vote
0answers
25 views

How to direct Apache2 HTTPS sub-directory request to HTTP app server on another port?

for complete Apache newbie, I have NextCloud and Monitorix running on my local server https://192.168.1.2/nextcloud http://192.168.1.2:8080/monitorix and I would like to cover it via SSL, something ...
3
votes
0answers
589 views

Reload a domain certificate in prosody (wirhin jitsi-meet)

I have 2 servers both running Ubuntu 18-04: server A with apt install of jitsi-meet (fully working) server B with an edited install (from github) of jibri (fully working) The A server (the server ...
4
votes
1answer
296 views

Is it OK to have a website not listen at all on port 80?

I am running a small static website in a google storage bucket. I have http and https support. But I want http to redirect to https, so no visitor ends up with the "not secure" browser warning. ...
2
votes
0answers
1k views

No private key when installing SSL certificates from GoDaddy via cPanel

I am having troubles with installing ssl certificate. The ssl was created on GoDaddy without using crt created by hosting cpanel. Now I have file in formats of crt, pem, p7b. When I upload the crt ...

1
2 3 4 5
19