Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

HTTPS is the secure version of the hypertext transfer protocol (HTTP). It usually uses port 443 and is powered by the TLS (formerly SSL) cryptographic protocol.

0
votes
1answer
4 views

How to transfer an SSL certificate from one cPanel account to another? Do I need to transfer it? I have WHM with the new account

I've moved a site to a new hosting account, and need to get SSL working again. On the old hosting account, as I understand it, the hosting provider just issued free Let's Encrypt certificates and ...
0
votes
0answers
14 views

Is https required for normal blog post? [duplicate]

So we often heard words like "https is great, and you should always use them since we have free ones now (LE). Plus it makes you rank higher in Google. But the question is do we really need to force ...
0
votes
0answers
27 views

How to continue or restart a failed Certbot transaction

We run a web server for a free/open source project on a CentOS 7 VM. We have Apache 2.4 installed from Red Hat's Software Collections (SCL). We also installed EFF's Certbot from EPEL to manage HTTPS ...
0
votes
0answers
18 views

Redirection and HTTPS [duplicate]

Hoping it's a stupid and basic question, but can't find the answer in Google, nor in search here. Website setup: http://www.example.com http://sub.example.com Then introduced SSL, so now it's: ...
2
votes
1answer
24 views

How would you write an http to https redirect rule for web.config on IIS8 that would go directly to preferred domain with www.?

I have a site that we just setup with SSL and have a redirect rule set up in web.config. We also use the www. as the preferred domain. The problem I have is I want to skip the middle step in the ...
3
votes
1answer
51 views

421 Misdirected Request on Shared Host

I am on a shared host (Apache) and am receiving little help resolving this issue. I have a main domain https://www.waldorfteacherresources.com and I have set up two cookieless domains: static....
1
vote
0answers
32 views

Best practice for moving subdomain to new root domain while keeping url structure + SEO [closed]

I am looking for best standards for 301 redirects and complete domain migration that preserves SEO rankings. A redirect from subdomain to root domain, root to root domain, keeping basic url structure, ...
1
vote
1answer
25 views

SSL certificate working fine for normal website but get certificate error when proxying requests through Apache to another application

I have just installed an SSL certificate on my webserver which is working fine for multiple subdomains without any issue. I then have a particular subdomain which receives a request through Apache ...
2
votes
2answers
30 views

SAN SSL certificate vs Single Site SSL and SEO

Does having an SSL certificate issued for each subdomain rank the same as having one SAN SSL certificate grouping all of them? Example: First scenario: example.com -> has it's own SSL certificate ...
2
votes
1answer
25 views

Auto check that HTTPS certificate has renewed successfully

Ive got a lets encrypt HTTPS certificate installed for a site that auto renews. My concern is that it may fail the auto renew and visitors may be greeted with an expired certificate warning. Whats ...
-1
votes
1answer
32 views

I cannot do https redirection on my website on .htaccess

Am having a local classified website. I bought SSL for the domain but cannot put https redirect on htaccess since my developer wrote somerule on htaccess to get url for SEO. Can some help for the same....
2
votes
1answer
22 views

What type of SSL does a FTP sub domain, WWW or NON-WWW require?

We have a few web servers and an FTP server that sits behind our public IP that is used for a few applications. We need to get an SSL Certificate that I can install on each of the servers to pass PCI ...
1
vote
1answer
49 views

After moving to HTTPS google has only indexed 2 pages ?

Ive recently upgrade a site to HTTPS, as part of this process i added the HTTPS (www. and non www.) versions to google webmaster tools, submitted a fetch as google bot request and then requested re-...
3
votes
2answers
44 views

.htaccess using HTTP_HOST has one extra extraneous redirect when forcing HTTPS

When I use these lines in my .htaccess file, everything works well: RewriteEngine On RewriteCond %{HTTPS} !=on RewriteRule ^(.*)$ https://example.com%{REQUEST_URI} [L,R=301] Then I tried to make it ...
0
votes
0answers
41 views

My website incorrectly redirected to another site until I cleared my browser cache. Why?

I have a domain registered at GoDaddy and have configured it to run a web application. Apparently https://www.example.com points to my web application but https://example.com redirects to a seemingly ...
1
vote
1answer
92 views

How to change challenge from tls-sni-01 to webroot for existing letsencrypt certificate?

I'm trying to renew my certificate that is due to expire. I used the apache plugin for certbot like this: sudo certbot --apache -d support.example.com. However, when I try to renew it now it uses tls-...
0
votes
1answer
37 views

Google Consider HTTPs over HTTP - How to redirect https to http without losing traffic

I have not installed SSL nor enable on my website, however the hosting companies did it. Now Google started crawling https pages over http. I have uninstall the ssl form Hosting Cpanel today. ...
1
vote
0answers
23 views

IIS website only allowing https connection, no http

We are running two websites on IIS (site1.site.example and site2.site.example). Both sites have the same bindings but with different host names (as above), on IP address * and for ports 80 and 443 (...
1
vote
1answer
14 views

HTTPS site to HTTPS site refferal info in Google Analytics

We are moving a site from HTTP to HTTPS. Apart from security one of the reasons we are doing it is so that we can get referrer info in google analytics. 1-2 years ago when many fewer sites where ...
2
votes
0answers
143 views

Non-www to www redirect not working in Firefox; Works in Chrome with nginx server

I've configured my website to have https with www scheme. I opted to redirect all the traffic from non-www to www, at the time of setting up LetsEncrypt SSL certificate and it works absolutely fine on ...
1
vote
0answers
10 views

Installing a free world-compatible SSL certificate in WHM/Cpanel

It's been a while but here I am again. I just found out today that users of chrome 69 or later will see a big "insecure" message for webpages beginning with http:// such as mine and even Bing's ...
0
votes
1answer
29 views

How to set up a reverse proxy on an SSL subdirectory from another server?

Setup is as follows: Our agency's client's domain is https://www.example.com (with SSL certificate from Amazon) They have NGINX severs, and manage their own hosting They want us to build a few simple ...
3
votes
1answer
62 views

HTTPS redirect, exclude script parameters from URL

My goals: 1. http://example.com/page/index.php -> https://example.com/page/ 2. http://example.com/page/ -> https://example.com/page/ 3. http://www.example.com/page/ -> https://example.com/...
2
votes
1answer
36 views

Are these 3 redirect rules equal?

I would like to redirect the non-https and non-www versions my domain to the https and www version of it. I'm a bit confused by the options. Are these redirect rules equal for my purpose? # REDIRECT ...
2
votes
1answer
32 views

“DNS CAA No” from ssllabs.com; Cause of Android Error?

After five months of no problems nor errors with my Comodo certificate on a personal website suddenly, as of two or three days ago, I'm getting a meddlesome, "Certificate isn't from a trusted ...
2
votes
2answers
84 views

How is it best to redirect http to https in cPanel?

I am setting up a new site on a domain that has an SSL certificate. The DNS is all configured correctly and I can access the site on either http://example.com or https://example.com URLs. Currently, ...
4
votes
2answers
104 views

How to force ssl and www for a subdomain as an independent domain?

I have own the example.tld . I want to force SSL and https for root-domain and all of its subdomains. I have used below code in .htaccess file of root-domain: RewriteEngine On RewriteCond %{HTTPS} ...
1
vote
0answers
18 views

Social sharing count (Specially Facebook and Twitter) when moving to HTTPS

How can I get back the social sharing count (Specially Facebook and Twitter) when moving to HTTPS? Note : WordPress Site (I don't think platform does not related to this question. But if it is ...
0
votes
1answer
65 views

Is there any extra step we need to do when changing web hosting company with HTTPS site?

I have bought domains from A company. My all sites were in shared hosting account on Company B. I have moved my all sites to shared hosting account on Company C from B. I know the all the steps. ...
0
votes
1answer
54 views

HTTPS - HTTP communication on the same server

There is a server. On the server is apache. Apache has certificates. On the apache is a website - client, thanks to certificates the client is accessible by https://example.com/~path. The client is ...
1
vote
1answer
94 views

Do we NEED separate HTTP and HTTPS sitemaps for corresponding GSC properties?

We are in the midst of migrating from HTTP to HTTPS. According to Google Support, we need to have separate properties in GSC for each protocol. I also read that Google recommends that each property ...
6
votes
3answers
515 views

Is an .htaccess edit necessary when enabling Cloudflare SSL?

I have recently changed 3-4 of my sites to Cloudflare SSL. After that, I went to General Settings on WordPress and changed URLs from HTTP to HTTPS. And it redirects from HTTP to HTTPS without any ...
1
vote
1answer
29 views

what is the proper file permissions needed for certificate files

I am curious about what should be the file permission of the ssl certificate files. Because you really don't want anyone physically copying the server key, so why does the hosts make it readable to ...
1
vote
0answers
42 views

Facebook debugger is caching different IP addresses for same domain

I have problem with Facebook debugger, I tried to scrape domains few times, and I got strange results. Facebook debugger is caching different IP addresses for the same domain. I saw a few different ...
3
votes
1answer
228 views

HTTP to HTTPS redirect for a specific domain through web.config

I'm trying to do a HTTP to HTTPS redirect on a GoDaddy web hosting platform. I have the Windows hosting platform and I'm editing the web.config file. There are multiple domains under this hosting ...
1
vote
1answer
26 views

What's the best time to install SSL certificate on a WordPress blog?

I have created a new WordPress blog and just added a post on it. I want to install SSL certificate on this blog. What's the best practice to install SSL certificate? Is it before WordPress ...
4
votes
1answer
589 views

Is a PHP POST using cURL from HTTPS site to HTTP endpoint encrypted securely?

I have a website residing on a domain with a valid SSL certificate that is fully using HTTPS. If I take form data from this site that is secured with an SSL and send it to a non-secure HTTP endpoint ...
1
vote
2answers
179 views

How do I set my preferred domain in Google search console to use www and https?

I have seen a similar question here: Can't add preferred version to Google Webmasters / Search Console I have added the other properties for my website fo Google Search: When I follow the ...
1
vote
0answers
141 views

CloudFront very slow TTFB after enabling HTTP/2

My site was running on HTTP/1.1 with CloudFront at front, Webpagetest reports the load time usually at 2 seconds. Yesterday I enabled HTTP/2 (and SSL) on CloudFront, hoping to see an improvement. The ...
1
vote
0answers
12 views

double authentication for https password protected password

I am hosting a customer's OpenCart store on my own domain hosting. I have add-on domain in my CPanel for customer's domain and created sub domain for it to ease access. Other than the double ...
1
vote
1answer
183 views

Force non-www https mode for a dirctory and its sub-folders

My root website (example.com) and its folder (example.com/folder) have two different CMS (Opencart for example.com and WordPress for example.com/folder). I use this code in example.com to force non-...
1
vote
1answer
51 views

HSTS implementation when using www.TLD

Been looking at implementing HSTS in to one of our sites, hoping to validate it on the preload list. But I can't get my head around how it works with the www. Subdomain. Our site forces secure www....
3
votes
4answers
102 views

Hold my hand through my htaccess http to https redirects

I've been researching the best way to handle my htaccess file in order to switch from http requests to https and I've seen everything from basing requests off server ports, using server name requests ...
1
vote
1answer
94 views

Should I submit my website sitemap to Google/Bing using HTTPS Urls?

I have a website without a google webmaster account connected to it. I want to install an SSL certificate on it. After doing that, What is the best practice in order to submit the site to google? ...
1
vote
0answers
53 views

After HTTPS migration can we leave the old sitemap as it is and upload the new sitemap with HTTPS URLs?

We are migrating from HTTP to HTTPS. We left our old sitemap as it is and uploaded the new sitemap with HTTPS pages with new name. I read it at Google’s Search Console Help: Move a site with URL ...
0
votes
2answers
71 views

General questions on operation of SSL secured sites [closed]

I am trying to get some understanding on differences between unsecured (http:// accessed) and SSL secured (https://) websites on Apache servers. So I am not trying to solve a specific problem right ...
1
vote
0answers
73 views

Multiple SSL server blocks with nginx on single ec2 instance

I've asked this question before and I think I found a potential answer on the nginx Website, which is to have multiple internal IPs for the Web server to listen on. I don't know how to do that with ...
0
votes
1answer
22 views

What are the advantages of using Blogger's HTTPS with custom domain?

Blogger's HTTPS is now available for custom domains too. I am currently using Cloudflare SSL and they automatically apply it to all HTTP requests, and changes "http" to "https" for all resources or ...
0
votes
0answers
40 views

Google AdSense violation on non SSL page?

I had a violation with Google AdSense recently and was able to clear it up thanks to the help of this forum. However, the same URL is displaying the same violation for the http version of the site, ...
2
votes
1answer
24 views

Will linked references still work after i change a site to https?

We're looking at changing a site from http to https. There are some 3rd party sites that hotlink / link to reference images on our site (we have allowed them to do this) but there <img ref="#">...