The Stack Overflow podcast is back! Listen to an interview with our new CEO.

Questions tagged [https]

HTTPS is the secure version of the hypertext transfer protocol (HTTP). It usually uses port 443 and is powered by the TLS (formerly SSL) cryptographic protocol.

Filter by
Sorted by
Tagged with
1
vote
3answers
84 views

Using htaccess to force HTTPS doesn't work

BIG EDIT: The host that takes care of my SSL just told me ''The SSL that we provide with your contract only protect one domain OR one subdomain, not both''. They told them then that it's why bebechan....
4
votes
3answers
68 views
+50

Drop in referral data due to HTTP, changed to HTTPS no recovery referral data since (in the last year)

We changed our site from HTTP to HTTPS about a year ago. We have a static website, with no functionality for user input, so did not see it as an imperative to change to HTTPS anytime sooner, the ...
7
votes
3answers
212 views

What can I do to pay less for SSL?

I currently have a web hosting account and 27 domains that cost 1310 PLN (about $358.37) per year. Because the next version of Chrome will start displaying "not secure" warnings when a user enters ...
1
vote
1answer
10 views

.htaccess HTTPS fowarding still redirecting to a folder which I have removed from the rule

I have the following simple code in my .htaccess file in order to forward my domain to the HTTPS version of the website: RewriteEngine On RewriteCond %{SERVER_PORT} 80 RewriteRule ^(.*)$ https://...
2
votes
1answer
29 views

Site unexpectedly closed the connection when in HTTPS

I make no bones about it. I am a noob at websites. Saying that I tend to research questions before asking for help. Today I was working with Hostgator to get SSL on my site. They got it on there and ...
1
vote
1answer
25 views

Track HTTP and HTTPS traffic details separately on Google Analytics?

How can I track HTTP and HTTPS traffic details separately from Google Analytics.
2
votes
1answer
166 views

Forcing all requests to HTTPS vs not forcing all requests

I'm not new to cleaning up mixed content errors after switching from http to https and I'm not new to working with the htaccess file but I am new to actually implementing the rules for http to https ...
1
vote
1answer
13 views

How to Install Free Lets Encrypt SSL Certificate on GoDaddy Managed WordPress Hosting?

I'm posting this question here along with an answer for reference in case anyone else is wondering how to install free SSL certificates from Let's Encrypt on GoDaddy Managed WordPress plans. The ...
1
vote
0answers
14 views

Why does everyone prefer SSL Offloading?

I started to setup a Reverse Proxy on Windows Server 2012 R2 with IIS and the AAR module installed (but purely as a Reverse Proxy without load balancing). It was relatively easy to setup a URL Rewrite ...
2
votes
1answer
27 views

Facebook shows blank image and preview after sharing a HTTPS link from my website

My site before was only HTTP. I used that website for sharing public information with my friends. I like to post news that I want then share it to Facebook and when I post a link (HTTP link since my ...
1
vote
1answer
56 views

Will referrer info get lost in Google Analytics if i 301 from HTTP to HTTPS?

If we have a bunch of backlinks from HTTPS sites, but they link to the http://example.com version of our site or example.com. Even if our site is HTTPS and once traffic gets driven to those URLS ...
1
vote
1answer
73 views

Configuring domain name to cover multiple hosts

Background: I currently host my public-facing website on GoDaddy servers. I am developing the server backend of a mobile application. The business logic and database are hosted on separate instances ...
4
votes
1answer
53 views

How would you implement redirects for domain canonicalization, no-www, and HTTPS for IIS 7.5

For the moment I'm stuck with an IIS-server, unfortunately not my best subject (I'm much better w. Apache). We have a site on a Win 2008 R2 Server with IIS 7.5. It's an old site and we are working on ...
2
votes
0answers
29 views

What is the Cloudflare equivalent of these two .htaccess redirect rules?

I usually set up my sites to rewrite URLs in the following cases: All http traffic is redirected to https (and www), with a 301 All non-www traffic is redirected to www (and https), with a 301 In ....
2
votes
2answers
960 views

How to add lock symbol to my website using private SSL in https pages

I just purchased SSL for my website from hostgator, so that I can add lock symbol in my website, when users visit https://www.mysite.com For example: Now they have installed the certificate, but I ...
16
votes
1answer
4k views

Should I submit https:// and http:// in Google Search Console both with and without the www?

In my site I'm redirecting everything (http://, http://www., https://) to https://www.example.com. Google webmaster tools says: Make sure you add both "www" and "non-www" versions for your site. Also,...
0
votes
1answer
20 views

Bad route appended to URL when redirecting from http to https

I have a WordPress site hosted on OVH and I'm having issues when redirecting from http to https. http://www.example.com redirects nicely to https://www.example.com https://www.example.com redirects ...
1
vote
2answers
61 views

Apache redirect HTTP to HTTPS without preventing HTTP

Background I've added an SSL cert using Lets Encrypt/Certbot on my Debian 9 (Stretch) host. To modify my Apache configuration, essentially certbot copies the vhost.conf file, wraps it with and ...
1
vote
2answers
89 views

What makes Open Graph checkers unable to detect Open Graph data?

My page, after adding SSL certificate, cannot have preview fetched by Facebook or Twitter when sharing the link. I have followed The Open Graph protocol and include the following open graph tags: &...
62
votes
5answers
7k views

Why should I pay for an SSL certificate?

I paid for an SSL certificate from Namecheap, I think it was certified by ComodoSSL. It cost me 7$, it took them a week to activate and I had to do it myself from SSH while editing my site's ...
11
votes
6answers
8k views

Forcing SSL and www in .htaccess

I'm looking for a way to force SSL and www. I've been able to force both separately but together I keep running into redirection issues. The following code works when handling a URL in this format: ...
1
vote
0answers
24 views

Why does turning off “Force SSL with https redirect” keep http links redirect to https?

I realize this question can be an XY one. After upgrading my site from http to https, FB OpenGraph og:image not pulling images anymore. The solution seems to be using http links rather than https in ...
0
votes
0answers
63 views

Exception: System.Net.WebException: The underlying connection was closed - IIS

I have very strange trouble and it's difficult to me to find solution for this error. Currently i have some services (.NET) hosted on the IIS on different servers. On one of the servers there are ...
1
vote
0answers
11 views

Should my sitemap and robots.txt have http or https urls for the given scenario [duplicate]

My website is running on node.js and runs in http on port 3000 I am using NGINX to enable https access so that all pages are served as https I have placed my sitemap.xml and robots.txt inside the ...
0
votes
1answer
28 views

HTTPS time out for newly installed SSL certificate on Nginx

Recently I bought a SSL certificate on GoDaddy and set it up in my Nginx server like this: server { listen 443 ssl default_server; server_name www.mywebsite.example; ssl on; ...
3
votes
1answer
74 views

Google Analytics seems to be affected after setting preferred domain

I hope you can assist me with this! I've recently changed the preferred domain for my site https://example.com. Unfortunately, after doing so, it appears that views/visits are no longer being recorded ...
1
vote
1answer
44 views

Researching .htaccess Syntax

In my template .htaccess file I have been copying and pasteing alot of rules and researching .htaccess for around 2 weeks in an attempt to try and better understand the syntax, different modules & ...
7
votes
3answers
11k views

Do internal intranet websites need to be secure?

The question is in the title. Does an internal site need to have https security? For example we have an internal site that handles our client's license keys -- do we need for that to be secure since ...
3
votes
1answer
7k views

How can I force a VirtualHost in Apache to not listen for undefined subdomains on 443?

In /etc/apache2/sites-available/example.com: <VirtualHost *:443> ServerName www.example.com DocumentRoot /var/www/example.com/htdocs SSLEngine on ...
0
votes
0answers
41 views

OVH active SSL for domains used for redirection

I have 2 domains: domain-a.example is my main website and domain-b.example is a domain used to redirect users to my main website (domain-a.example). On my ovh dashboard I set the redirection from ...
4
votes
2answers
559 views

How to use the private and public keys?

I am new to ssl certificates, i wanted to learn about ssl certificates, and I generated private and public keys myself while logged into cpanel, I wonder how to use those and generate a secured ...
4
votes
1answer
3k views

Does changing from HTTPS to HTTP kill my backlinks?

I had only my main page changed to HTTP to test out if I want to change from HTTPS to HTTP. All my backlinks are to my HTTPS site. Will I lose all of my backlinks and have to start over when switching ...
0
votes
1answer
105 views

HTTPS Re-directing

We built a site for a client to advertise a new block of apartments they had built. The apartments have now all been sold so we have been asked to forward the domain to another domain until there is ...
0
votes
1answer
53 views

New SSL certificate is not propagated

I have installed a new SSL certificate on my server and removed the old one but when I open the website using new PC and new browsers, I still view the old certificate in the browser. I have windows ...
0
votes
1answer
23 views

Why does a domain-validated certificate issued by certificate authority for example1.com works on example2.com?

Doesn't that completely defeat the purpose of having the first domain verified by a certificate authority when the certificate also works on other domains? How are they different from self-signed ...
2
votes
2answers
113 views

Why do SSL certificates expire?

Why do SSL certificates usually expire after a certain given period of time?Can't it really be a thing of once applied and verified, then it should be a lifetime venture?
2
votes
2answers
38 views

Google Search Ranking and Switching to HTTPS

We have switched to an HTTPS site to replace the client's old site. The domain name is the same, but the majority of pages have different names and different URLs compared to the old site. Redirects ...
0
votes
1answer
32 views

How to setup SSL on the new platform when migrating?

I'm looking to move our current site from the current hosting platform to a new provider. The part I'm struggling with is setting up the SSL certificate on the new platform. I can't see how to do this ...
1
vote
0answers
34 views

Partner referral sales have tanked two months after HTTPS migration, switch back?

On march 2nd I migrated my website from http to https and also put the site on a new VPS that I configured. I have 301'd all urls to https and I have no mixed content warnings. I have also added the ...
0
votes
1answer
39 views

forcing SSL without 301 redirect

Is there a way to force an SSL lock without using a 301 redirect, such as server side? I'm happy to supply context if requested.
3
votes
1answer
1k views

421 Misdirected Request on Shared Host

I am on a shared host (Apache) and am receiving little help resolving this issue. I have a main domain https://www.waldorfteacherresources.com and I have set up two cookieless domains: static....
2
votes
1answer
90 views

Firebase and Godaddy: Hosting redirection to www doesn't work for https

I have a website whose domain name is example.com from GoDaddy and my SSL certificate and hosting is on firebase. Currently www.example.com forwards properly to https://www.example.com but https://...
2
votes
0answers
37 views

After redirecting to canonical domain and HTTPS, Google Search Console reports most of my pages are now excluded

In Google Search Console - Coverage for one of my sites it says : Error 0 Valid with warnings 22 Valid 10 Excluded 11.1k Expanding Excluded, it's 6,000 for pages with redirect and 3,400 with a soft ...
17
votes
2answers
11k views

StartSSL certificate gives SEC_ERROR_REVOKED_CERTIFICATE in Firefox and ERR_CERT_AUTHORITY_INVALID in Chrome

My existing HTTPS certificate is expiring soon so I bought a new one. I'm having a very hard time installing it properly though. I have a wildcard certificate from StartSSL for *.deadsea....
0
votes
0answers
34 views

How can I access https file via https request without 403 forbidden in IIS?

I recently installed a site certificate to secure our website. We sell software and there are many installed users who are using some pre-website change versions of our software. Internally, the ...
118
votes
5answers
213k views

Moving from HTTP to HTTPS in Google Search Console

I'm moving from HTTP to HTTPS for my entire site. The site is currently added to Google Search Console (formerly Google Webmaster Tools) as www.example.com and all the pages are indexed without using ...
1
vote
1answer
48 views

Moving from HTTP to HTTPS in Google Search Console (May 2019)

I have a client whose websites I have just moved from http to https. He's also asked me to update Google Web Master Tools too. Web Master Tools is now called Google Search Console, and appears to ...
1
vote
0answers
29 views

None https websites access issue under the same IP [closed]

I found a weird issue today for none-https website. I have 5 sites hosted on the same IP. Only 1 website has ssl enabled, name it Site A. However, When I access https version of none-https sites like ...
0
votes
0answers
61 views

HTTPS On AWS Bitnami Wordpress - HTTP Working But “This site can’t be reached” On HTTPS

I've installed Wordpress on AWS EC2. The site works fine on HTTP. I've got a third party cert installed via Certificate Manager. Current setup that doesn't work: EC2 install. wp-config.php set to ...
0
votes
1answer
29 views

Trying to understand the difference between two Apache SSL config statements

I'm using Apache 2.2.34, OpenSSL 1.0.2l. Yep, I know its sun-setted and not supported, but plans to upgrade it are not immediate. I'm trying to understand the difference between these two statements....