Questions tagged [https]

HTTPS is the secure version of the hypertext transfer protocol (HTTP). It usually uses port 443 and is powered by the TLS (formerly SSL) cryptographic protocol.

Filter by
Sorted by
Tagged with
1
vote
1answer
37 views

Researching .htaccess Syntax

In my template .htaccess file I have been copying and pasteing alot of rules and researching .htaccess for around 2 weeks in an attempt to try and better understand the syntax, different modules & ...
7
votes
3answers
10k views

Do internal intranet websites need to be secure?

The question is in the title. Does an internal site need to have https security? For example we have an internal site that handles our client's license keys -- do we need for that to be secure since ...
1
vote
1answer
28 views

Will referrer info get lost in Google Analytics if i 301 from HTTP to HTTPS?

If we have a bunch of backlinks from HTTPS sites, but they link to the http://example.com version of our site or example.com. Even if our site is HTTPS and once traffic gets driven to those URLS ...
3
votes
1answer
7k views

How can I force a VirtualHost in Apache to not listen for undefined subdomains on 443?

In /etc/apache2/sites-available/example.com: <VirtualHost *:443> ServerName www.example.com DocumentRoot /var/www/example.com/htdocs SSLEngine on ...
0
votes
0answers
27 views

OVH active SSL for domains used for redirection

I have 2 domains: domain-a.example is my main website and domain-b.example is a domain used to redirect users to my main website (domain-a.example). On my ovh dashboard I set the redirection from ...
4
votes
2answers
558 views

How to use the private and public keys?

I am new to ssl certificates, i wanted to learn about ssl certificates, and I generated private and public keys myself while logged into cpanel, I wonder how to use those and generate a secured ...
4
votes
1answer
2k views

Does changing from HTTPS to HTTP kill my backlinks?

I had only my main page changed to HTTP to test out if I want to change from HTTPS to HTTP. All my backlinks are to my HTTPS site. Will I lose all of my backlinks and have to start over when switching ...
0
votes
1answer
64 views

HTTPS Re-directing

We built a site for a client to advertise a new block of apartments they had built. The apartments have now all been sold so we have been asked to forward the domain to another domain until there is ...
0
votes
1answer
30 views

New SSL certificate is not propagated

I have installed a new SSL certificate on my server and removed the old one but when I open the website using new PC and new browsers, I still view the old certificate in the browser. I have windows ...
0
votes
1answer
20 views

Why does a domain-validated certificate issued by certificate authority for example1.com works on example2.com?

Doesn't that completely defeat the purpose of having the first domain verified by a certificate authority when the certificate also works on other domains? How are they different from self-signed ...
2
votes
2answers
105 views

Why do SSL certificates expire?

Why do SSL certificates usually expire after a certain given period of time?Can't it really be a thing of once applied and verified, then it should be a lifetime venture?
2
votes
2answers
36 views

Google Search Ranking and Switching to HTTPS

We have switched to an HTTPS site to replace the client's old site. The domain name is the same, but the majority of pages have different names and different URLs compared to the old site. Redirects ...
0
votes
1answer
28 views

How to setup SSL on the new platform when migrating?

I'm looking to move our current site from the current hosting platform to a new provider. The part I'm struggling with is setting up the SSL certificate on the new platform. I can't see how to do this ...
1
vote
0answers
32 views

Partner referral sales have tanked two months after HTTPS migration, switch back?

On march 2nd I migrated my website from http to https and also put the site on a new VPS that I configured. I have 301'd all urls to https and I have no mixed content warnings. I have also added the ...
0
votes
1answer
38 views

forcing SSL without 301 redirect

Is there a way to force an SSL lock without using a 301 redirect, such as server side? I'm happy to supply context if requested.
3
votes
1answer
874 views

421 Misdirected Request on Shared Host

I am on a shared host (Apache) and am receiving little help resolving this issue. I have a main domain https://www.waldorfteacherresources.com and I have set up two cookieless domains: static....
2
votes
1answer
35 views

Firebase and Godaddy: Hosting redirection to www doesn't work for https

I have a website whose domain name is example.com from GoDaddy and my SSL certificate and hosting is on firebase. Currently www.example.com forwards properly to https://www.example.com but https://...
1
vote
1answer
66 views

Configuring domain name to cover multiple hosts

Background: I currently host my public-facing website on GoDaddy servers. I am developing the server backend of a mobile application. The business logic and database are hosted on separate instances ...
2
votes
0answers
31 views

After redirecting to canonical domain and HTTPS, Google Search Console reports most of my pages are now excluded

In Google Search Console - Coverage for one of my sites it says : Error 0 Valid with warnings 22 Valid 10 Excluded 11.1k Expanding Excluded, it's 6,000 for pages with redirect and 3,400 with a soft ...
17
votes
2answers
11k views

StartSSL certificate gives SEC_ERROR_REVOKED_CERTIFICATE in Firefox and ERR_CERT_AUTHORITY_INVALID in Chrome

My existing HTTPS certificate is expiring soon so I bought a new one. I'm having a very hard time installing it properly though. I have a wildcard certificate from StartSSL for *.deadsea....
0
votes
0answers
29 views

How can I access https file via https request without 403 forbidden in IIS?

I recently installed a site certificate to secure our website. We sell software and there are many installed users who are using some pre-website change versions of our software. Internally, the ...
117
votes
5answers
207k views

Moving from HTTP to HTTPS in Google Search Console

I'm moving from HTTP to HTTPS for my entire site. The site is currently added to Google Search Console (formerly Google Webmaster Tools) as www.example.com and all the pages are indexed without using ...
1
vote
1answer
44 views

Moving from HTTP to HTTPS in Google Search Console (May 2019)

I have a client whose websites I have just moved from http to https. He's also asked me to update Google Web Master Tools too. Web Master Tools is now called Google Search Console, and appears to ...
1
vote
0answers
28 views

None https websites access issue under the same IP [closed]

I found a weird issue today for none-https website. I have 5 sites hosted on the same IP. Only 1 website has ssl enabled, name it Site A. However, When I access https version of none-https sites like ...
0
votes
0answers
27 views

HTTPS On AWS Bitnami Wordpress - HTTP Working But “This site can’t be reached” On HTTPS

I've installed Wordpress on AWS EC2. The site works fine on HTTP. I've got a third party cert installed via Certificate Manager. Current setup that doesn't work: EC2 install. wp-config.php set to ...
0
votes
1answer
29 views

Trying to understand the difference between two Apache SSL config statements

I'm using Apache 2.2.34, OpenSSL 1.0.2l. Yep, I know its sun-setted and not supported, but plans to upgrade it are not immediate. I'm trying to understand the difference between these two statements....
0
votes
1answer
29 views

SSL on staging server

I have three servers: development, staging and production. I use dev as a messy environment on which I write my code. Production is my clean, sparkly, shiny tidy web server. When pushing a new version ...
1
vote
0answers
95 views

Let's Encrypt certificate renewal failure: “too many failed authorizations recently”

I am running a website on my Raspberry Pi with 2 different domain names. Installing the certificate for https:// when it became necessary was no problem. But renewing it seems impossible. I have ...
2
votes
1answer
544 views

How to transfer an SSL certificate from one cPanel account to another? Do I need to transfer it? I have WHM with the new account

I've moved a site to a new hosting account, and need to get SSL working again. On the old hosting account, as I understand it, the hosting provider just issued free Let's Encrypt certificates and ...
3
votes
1answer
71 views

Google Analytics seems to be affected after setting preferred domain

I hope you can assist me with this! I've recently changed the preferred domain for my site https://example.com. Unfortunately, after doing so, it appears that views/visits are no longer being recorded ...
6
votes
4answers
5k views

Does SSL require a client side certificate of any kind at all?

A friend insists it does, that both browser and server both need certificates. I say no, only the server requires one, with two keys. The question is whether the browser uses some sort of certificate (...
1
vote
1answer
46 views

Alias subdomain to subfolder (not redirect) with .htaccess (with HTTPS), error ERR_TOO_MANY_REDIRECTS

Well, I'm trying to accomplish this task by using this .htaccess: Options +FollowSymLinks RewriteEngine On # HTTPS (not working: ERR_TOO_MANY_REDIRECTS) # RewriteCond %{HTTPS} off # RewriteRule (.*)...
0
votes
1answer
27 views

Is it recommended to add SSL certificate protection to the domain's subdomains (webmail,webdisk,cpanel)?

I bought web hosting under FastComet and they have a free Let's Encrypt SSL service that comes with the package. There is an option to include the domain's subdomains (webmail,webdisk,cpanel) to ...
3
votes
0answers
41 views

Redirecting www and non www to HTTPS on blogger

I have a blog on Blogger and have activated HTTPS. This link works: https://www.example.com But this does not: https://example.com/ Is there a solution to this problem?
0
votes
2answers
32 views

Add SSL to a domain which is hosted from the same directory as another domain on nginx

I have a sub domain for eg subdomain.maindomainA.example which is pointing to subdomain.maindomainB.example [SSL enabled]. The A record of subdomain.maindomainA.com points to the IP address of ...
1
vote
4answers
62 views

Sudden Drop In Google Analytics Search Console Metrics After Linking HTTPS Property

I recently switched to HTTPS having no prior experience with GA, GSC, etc. I didn't realize until last week that I had to change the property and view settings in GA accordingly so I did that. I then ...
1
vote
1answer
98 views

Change of Address, Error in site redirection on Google Console

I am trying to change my domain on Google Search console using Change of Address tool, and for some reasons Google is throwing an error saying: The old site redirects to edbinx.com, which does not ...
2
votes
1answer
1k views

SSL Labs Cipher Strength < 100%, why? How do I make it?

I am in a progress of trying (again) to get maximum (or almost maximum) score on SSL Labs with my site. I currently do not understand, why it does not give me full Cipher strength score. Now, it ...
1
vote
1answer
56 views

How to disable TLSv1.0 and TLSv1.1 in VSFTPD on Debian 10 Buster?

I'm done with the insecure FTP and serve only FTP over SSL in my VSFTPD on Debian 10 Buster. The man page is not clear at all as per my question: How do I disable the 20 years old TLSv1.0 and also ...
1
vote
1answer
31 views

Do broken backlinks from HTTP websites matter or does Google only count HTTPS links now?

Some pages have been removed not redirected from the website of a client and now there are some broken backlinks but mainly coming from websites that are HTTP (have not migrated to HTTPS). How does ...
1
vote
3answers
45 views

How can I stop Google Search Console “index coverage” emails for the HTTP site now that I have migrated to HTTPS?

We have migrated our site to HTTPS from HTTP, so added HTTPS site in Google search console. But didn't remove HTTP site. We are receiving notifications continuously for HTTP site for index coverage ...
3
votes
3answers
294 views

Getting a “Potentially unsafe content” error on my WordPress site in MS Edge Browser

Some users have reported this error generated by Windows Defender SmartScreen in the MS Edge browser. No problems in the other browsers. Here's a screenshot of the error: It's been reported by ...
1
vote
1answer
87 views

Do I need cPanel's AutoSSL if I also enable Cloudflare's SSL?

All of the websites I manage use cPanel, which also offers free SSL certificates. However, some of these domains use Cloudflare for their DNS, and they also get their SSL certificates from Cloudflare ...
1
vote
1answer
53 views

.htaccess: Redirect all HTTPS to a subdomain, but EXCLUDE one subdomain folder

In summary: (Notice the "https") I have https://www.example.com All need to be re-directed to https://sub.example.com EXCEPT https://xyz.example.com/api Here is my current .htaccess: ...
1
vote
0answers
43 views

After implementing HTTPS, “require valid-user” in subdirectory no longer asks for password, just gives 401 Not Authorized

I'm not very knowledgeable about server scripting, however I've only just installed SSL certificate for the domain. The main website (hosted by GoDaddy) is now working fine on SSL/TLS and I've ...
2
votes
1answer
69 views

Redirect from www and http to https doesn't work on sub-domains

I am trying to redirect all www and non-https requests to the HTTPS only versions with Apache server. I don't need or want www or non SSL URLs at all. The issue is that with the 2 different snippets ...
1
vote
1answer
1k views

After switch to https, traffic isn't showing in Analytics

A client has been providing his website with http and https for a few years now and decided to switch to https-only a few months ago. We've started with the usual of changing the internal page links ...
1
vote
2answers
89 views

Will premium DNS speed up TLS/SSL?

I'm trialing out CloudFlare (which I only want for speed optimisation). I'm guessing I should wait a bit longer to test the true benefits, due to propagation. One thing I can't find out is if such ...
1
vote
1answer
284 views

Enabling cPanel AutoSSL alongside Cloudflare

We have a domain that is running behind Cloudflare that we would also like to have a valid (and free) SSL certificate on the origin server (running cPanel with AutoSSL). Currently the AutoSSL script ...
0
votes
1answer
75 views

Is there any extra step we need to do when changing web hosting company with HTTPS site?

I have bought domains from A company. My all sites were in shared hosting account on Company B. I have moved my all sites to shared hosting account on Company C from B. I know the all the steps. ...