Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [https]

HTTPS is the secure version of the hypertext transfer protocol (HTTP). It usually uses port 443 and is powered by the TLS (formerly SSL) cryptographic protocol.

0
votes
1answer
9 views

Sudden Drop In Google Analytics Search Console Metrics After Linking HTTPS Property

I recently switched to HTTPS having no prior experience with GA, GSC, etc. I didn't realize until last week that I had to change the property and view settings in GA accordingly so I did that. I then ...
0
votes
0answers
10 views

Moving from HTTP to HTTPS in Google Search Console Issue [on hold]

After moving to HTTPS, I created another property in Google Search Console: https://example.com. I didn't delete the old HTTP property form GSC. After few days, my impressions increased as well as ...
1
vote
1answer
21 views

How to disable TLSv1.0 and TLSv1.1 in VSFTPD on Debian 10 Buster?

I'm done with the insecure FTP and serve only FTP over SSL in my VSFTPD on Debian 10 Buster. The man page is not clear at all as per my question: How do I disable the 20 years old TLSv1.0 and also ...
1
vote
1answer
23 views

Do broken backlinks from HTTP websites matter or does Google only count HTTPS links now?

Some pages have been removed not redirected from the website of a client and now there are some broken backlinks but mainly coming from websites that are HTTP (have not migrated to HTTPS). How does ...
1
vote
3answers
27 views

How can I stop Google Search Console “index coverage” emails for the HTTP site now that I have migrated to HTTPS?

We have migrated our site to HTTPS from HTTP, so added HTTPS site in Google search console. But didn't remove HTTP site. We are receiving notifications continuously for HTTP site for index coverage ...
1
vote
1answer
27 views

Do I need cPanel's AutoSSL if I also enable Cloudflare's SSL?

All of the websites I manage use cPanel, which also offers free SSL certificates. However, some of these domains use Cloudflare for their DNS, and they also get their SSL certificates from Cloudflare ...
1
vote
1answer
13 views

.htaccess: Redirect all HTTPS to a subdomain, but EXCLUDE one subdomain folder

In summary: (Notice the "https") I have https://www.example.com All need to be re-directed to https://sub.example.com EXCEPT https://xyz.example.com/api Here is my current .htaccess: ...
1
vote
0answers
38 views

After implementing HTTPS, “require valid-user” in subdirectory no longer asks for password, just gives 401 Not Authorized

I'm not very knowledgeable about server scripting, however I've only just installed SSL certificate for the domain. The main website (hosted by GoDaddy) is now working fine on SSL/TLS and I've ...
1
vote
1answer
64 views

Enabling cPanel AutoSSL alongside Cloudflare

We have a domain that is running behind Cloudflare that we would also like to have a valid (and free) SSL certificate on the origin server (running cPanel with AutoSSL). Currently the AutoSSL script ...
0
votes
0answers
42 views

SSL works on homepage, but not on other pages [on hold]

I have this code in my .htaccess file: # www to non-www RewriteCond %{HTTP_HOST} ^www\.example\.com [NC] RewriteRule (.*) https://example.com/$1 [L,R=301] # http to https RewriteCond %{HTTPS} !=on ...
1
vote
1answer
25 views

haproxy with tls and ClientHello mesage with server_name extension

My goal is to configure haproxy as loadbalancer for multiple web servers with tls. I found some articles and it states that ClientHello message can contain extension with server_name. IIUC this is ...
1
vote
2answers
42 views

Move from HTTP to HTTPS and crawling requests

I have moved my web site from http to https, http is fully redirected to https and they are identical in content. I have added both properties to Google Search Console, when I ask Google for crawl (...
3
votes
1answer
20 views

What can I do when my Cloudflare SSL certificate isn't authorizing?

It's been over 24 hours since I activated SSL in the Crypto section of Cloudflare, but my Universal SSL Status still says "Authorizing Certificate". When I visit my site, Chrome says that the site ...
3
votes
5answers
114 views

Is HTTP to HTTPS redirect required even if site is only on HTTPS?

I have a new website and from day one, it was on HTTPS. For example: https://www.example.com/ Do I still need to redirect HTTP to HTTPS to avoid content duplication? For example, should I still set ...
1
vote
0answers
28 views

HSTS and redirecting to www. sub domain

I am trying to setup HSTS for my website but running into some problems regarding the response headers and the use of a sub domain. What I would like is for all HTTP traffic to redirect to https://www....
1
vote
0answers
27 views

changed site from http to https and now its unreachable by google [closed]

I move my website from http to https and now it does not appear in the google search resutls, it was appearing on the top search resutls. In google search consolte when I do fetch for the website it ...
2
votes
1answer
69 views

HTTPS site to HTTPS site referral traffic not showing up in Google Analytics

I have a site (site A) which used to get allot of traffic from a 3rd party site industry niche portal website (site B), both sites used to be HTTP. Traffic was viewable as referral traffic in Google ...
1
vote
0answers
14 views

Get Google Analytics to show seamless search console data from HTTP property to HTTPS property after migration

Background: Google Search Console (GSC) can provide up to 16 months of search performance data, and this can be reported in Google Analytics (GA) when GSC and GA are associated (GA > Acquisition > ...
1
vote
0answers
36 views

Wordpress + Cloudflare SSL redirects to apache root?

We recently deployed our new website and when trying to use it over SSL with cloudflare, it redirects to the Apache root dir? I generated origin TLS certificates and downloaded those from cloudflare ...
0
votes
0answers
12 views

Jetty9 authentication without credentials

I have a Mendelson AS2 server with Jetty9 as the https server. Currently all my vendors use basic authentication and certificate to connect to the AS2 server. I now have a vendor that does not support ...
0
votes
1answer
51 views

HTTPS Re-directing

We built a site for a client to advertise a new block of apartments they had built. The apartments have now all been sold so we have been asked to forward the domain to another domain until there is ...
1
vote
1answer
38 views

How to approach Let's Encrypt for 180 domain aliases

I have 180 or so websites that all run of a single MVC app. The app runs on a domain, which is not accessible directly by the public, and each of the 180 public facing sites are set up as domain ...
0
votes
0answers
17 views

I need a SSL Certificate Rekeyed from the file I have

My website is hosted on Hostek and I have the correct file to use to rekey my certificate. How do I go about entering this file so the correct SSL Certificate is generated? I renewed the certificate ...
2
votes
1answer
59 views

Redirect from www and http to https doesn't work on sub-domains

I am trying to redirect all www and non-https requests to the HTTPS only versions with Apache server. I don't need or want www or non SSL URLs at all. The issue is that with the 2 different snippets ...
0
votes
1answer
27 views

How to setup SSL on the new platform when migrating?

I'm looking to move our current site from the current hosting platform to a new provider. The part I'm struggling with is setting up the SSL certificate on the new platform. I can't see how to do this ...
1
vote
1answer
72 views

HTTPS proxy in Apache without certificates

The TLS handshake initiation contains the requested domain in cleartext, to allow a server to select the correct certificate. Therefore, the server should be able to proxy the handshake, and all ...
1
vote
2answers
71 views

Will premium DNS speed up TLS/SSL?

I'm trialing out CloudFlare (which I only want for speed optimisation). I'm guessing I should wait a bit longer to test the true benefits, due to propagation. One thing I can't find out is if such ...
1
vote
0answers
28 views

Add HTTPS (SSL certificate) to users custom domain names on a website builder

I have a website builder where users can add their domain name, and I need some direction on how to get it set up with HTTPS, I presume through LetsEncrypt. Example: Without domain: djdemo.vibecast....
2
votes
1answer
17 views

When redirecting to another domain, to which domain will HSTS apply?

Assuming the following, what domain will be HSTS'ed for the next year, foo.com or bar.com? RTFM (RFC6797) doesn't help much. > GET / HTTP/1.1 > Host: foo.com [ ... ] < HTTP/1.1 301 Moved ...
2
votes
0answers
41 views

How can I fix two conflicting SSL certificates? (One expired)

Background: I recently inherited management of a web project and ran into an issue with an expired SSL certificate. The site is hosted on AWS with a wildcard certificate generated from ACM, which is ...
0
votes
1answer
16 views

SEO when forward domain in global rank vs local region?

I have one .ir domain and google map services not works on .ir domains, I want to get .org domain and set SSL EV for this .org domain then forward .ir to .org domain. one web app is installed on this ...
3
votes
1answer
41 views

If redirects for variations are in place, can I safely consolidate down to one Google Search Console property?

I am redirecting using .htaccess to always use www, always use HTTPS. At this point, can I remove the duplicate Google Search Console properties (non-www and http)?
1
vote
1answer
73 views

Reason to have HTTPS for non-www?

Is it necessary to have a site answer on HTTPS non-www? Do visitors go there? Background on why I am asking: I have a client which have bought a new multi-domain certificate for their website. It ...
1
vote
1answer
25 views

IIS 10 giving internal error when attempting to redirect to HTTPS

I've looked at innumerable resources on how to set up a HTTP to HTTPS Redirect, but still it doesn't seem to work. Using IIS10 and the URL Rewrite module, here are my steps: I've generated a Self-...
2
votes
1answer
260 views

Nginx fails to start HTTP/2 server due to error: unknown log format

In our hosting server from the Plesk cpanel, Nginx is configured to work as a reverse proxy engine. As I need to enable HTTP/2 that can speed up the loading time of Plesk and hosted websites. ...
2
votes
0answers
22 views

Does an SSL certificate targeted at users in China need to be generated by a Certificate Authority in China by law?

The company I work for is hosting a web page secured with login and password and working through SSL with a certificate generated in USA. This is already on production. They want to expand the ...
1
vote
1answer
86 views

Rate limit encountered when setting up Free SSL Certificates from LetsEncrypt.org in Plesk

When I tried to add SSL to the hosting domain directly from letsencryt.org from the pre-built Plesk hosting cpanel I got the error as SSL/TLS Certificates Error: Could not issue a Let's Encrypt ...
2
votes
1answer
78 views

nginx: 301 redirect to non-www, SSL urls on default_server(s)

My goal is to have nginx primarily return a check for all requested URLs that start with http:// and/or contain //www., and 301 redirect them to the URL where //www. is replaced by // and http:// ...
1
vote
1answer
34 views

Site works ok on HTTP, not on HTTPS

I have the following on sites-enabled: 000-default.conf default-ssl.conf 000-default.conf has: <VirtualHost *:80> ServerName www.optonet.inter.edu ServerAdmin webmaster@opto.inter.edu ...
1
vote
1answer
28 views

Can the simple 301 redirect plugin for WordPress cause a redirect Loop when trying to redirect to the same path, but on HTTPS?

I want to redirect http://example.com/folder1/page1/ to https://example.com/folder1/page1/. In simple 301 redirect plugin in the request part I should write: /folder1/page1/. In the destination I may ...
1
vote
2answers
38 views

Pinging Domain doesn't give A Record IP

Should pinging a domain give you the IP the same as the A Record? Are there conditions where it shouldn't? A client's website isn't pointing to the A record IP, it's point to a Cloudflare DNS server. ...
1
vote
0answers
127 views

Search traffic significant drop since HTTPS migration [duplicate]

My website has seen a dramatic drop in search engine traffic (over 50%) since swapping to https 2 months ago. I have .htaccess rules for 301 redirects and since it is a Wordpress site, I also have a ...
0
votes
1answer
261 views

HTTPS + IP not redirecting to configured Domain Name and gives “Your connection is not private” [Nginx/Ubuntu]

I am using NGINX for 301 redirects on Ubuntu and reverse proxy for my Web Application and aim is to redirect traffic to non-www url such as https://mywebapplication.example. So with my current ...
1
vote
0answers
15 views

Heroku and 123 Reg showing IIS page only on naked domain

I've got a site set up with SSL that works as expected when manually typing in 'https://example.com' or 'http://example.com'. However, when I navigate to just 'example.com' I get an IIS hosting page. ...
0
votes
1answer
75 views

How to migrate from HTTP and HTTPS old sub domain to HTTPS root new domain in htaccess with least SEO risks?

Looking for the best site migration strategy for SEO, which consider these specific combinations of elements and challenges: *note: site is in Wordpress. Htaccess redirect code to go from sub ...
3
votes
0answers
32 views

Redirecting www and non www to HTTPS on blogger

I have a blog on Blogger and have activated HTTPS. This link works: https://www.example.com But this does not: https://example.com/ Is there a solution to this problem?
1
vote
1answer
40 views

SSL Verification files can't be read

I have created an Asp.Net Razor site in Visual Studio 2017. Anyway I was given a series of steps by Winhost for getting free SSL certificate. I followed those steps using SSL for Free. I've used ...
2
votes
0answers
19 views

Assessing TLS capabilities by examining user agent strings from log files

I have a long list of browser user agent strings pulled from website access logs which I would like to analyze to determine the TLS capabilities of our site's visitors in order to get a ballpark ...
2
votes
2answers
68 views

Wordpress htaccess redirect from http to https

Currently I use this rule on my WordPress .htaccess file to redirect HTTP to HTTPS: <IfModule mod_rewrite.c> RewriteEngine On RewriteCond %{HTTPS} off RewriteRule ^(.*)$ https://%{HTTP_HOST}%{...
1
vote
0answers
51 views

Combining password protection and redirects in .htaccess file

I'm a designer who developed a simple site with HTML and CSS. I'm completely new to .htaccess so it's not surprising I'm struggling to get the file to work as I want. Problem 1: I want to password ...