Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [https]

HTTPS is the secure version of the hypertext transfer protocol (HTTP). It usually uses port 443 and is powered by the TLS (formerly SSL) cryptographic protocol.

1
vote
1answer
44 views

what is the proper file permissions needed for certificate files

I am curious about what should be the file permission of the ssl certificate files. Because you really don't want anyone physically copying the server key, so why does the hosts make it readable to ...
1
vote
0answers
76 views

Facebook debugger is caching different IP addresses for same domain

I have problem with Facebook debugger, I tried to scrape domains few times, and I got strange results. Facebook debugger is caching different IP addresses for the same domain. I saw a few different ...
3
votes
1answer
855 views

HTTP to HTTPS redirect for a specific domain through web.config

I'm trying to do a HTTP to HTTPS redirect on a GoDaddy web hosting platform. I have the Windows hosting platform and I'm editing the web.config file. There are multiple domains under this hosting ...
1
vote
1answer
30 views

What's the best time to install SSL certificate on a WordPress blog?

I have created a new WordPress blog and just added a post on it. I want to install SSL certificate on this blog. What's the best practice to install SSL certificate? Is it before WordPress ...
4
votes
1answer
809 views

Is a PHP POST using cURL from HTTPS site to HTTP endpoint encrypted securely?

I have a website residing on a domain with a valid SSL certificate that is fully using HTTPS. If I take form data from this site that is secured with an SSL and send it to a non-secure HTTP endpoint ...
1
vote
2answers
743 views

How do I set my preferred domain in Google search console to use www and https?

I have seen a similar question here: Can't add preferred version to Google Webmasters / Search Console I have added the other properties for my website fo Google Search: When I follow the ...
1
vote
0answers
340 views

CloudFront very slow TTFB after enabling HTTP/2

My site was running on HTTP/1.1 with CloudFront at front, Webpagetest reports the load time usually at 2 seconds. Yesterday I enabled HTTP/2 (and SSL) on CloudFront, hoping to see an improvement. The ...
1
vote
0answers
18 views

double authentication for https password protected password

I am hosting a customer's OpenCart store on my own domain hosting. I have add-on domain in my CPanel for customer's domain and created sub domain for it to ease access. Other than the double ...
1
vote
1answer
803 views

Force non-www https mode for a dirctory and its sub-folders

My root website (example.com) and its folder (example.com/folder) have two different CMS (Opencart for example.com and WordPress for example.com/folder). I use this code in example.com to force non-...
1
vote
1answer
159 views

HSTS implementation when using www.TLD

Been looking at implementing HSTS in to one of our sites, hoping to validate it on the preload list. But I can't get my head around how it works with the www. Subdomain. Our site forces secure www....
3
votes
4answers
121 views

Hold my hand through my htaccess http to https redirects

I've been researching the best way to handle my htaccess file in order to switch from http requests to https and I've seen everything from basing requests off server ports, using server name requests ...
1
vote
1answer
260 views

Should I submit my website sitemap to Google/Bing using HTTPS Urls?

I have a website without a google webmaster account connected to it. I want to install an SSL certificate on it. After doing that, What is the best practice in order to submit the site to google? ...
1
vote
0answers
178 views

After HTTPS migration can we leave the old sitemap as it is and upload the new sitemap with HTTPS URLs?

We are migrating from HTTP to HTTPS. We left our old sitemap as it is and uploaded the new sitemap with HTTPS pages with new name. I read it at Google’s Search Console Help: Move a site with URL ...
0
votes
2answers
80 views

General questions on operation of SSL secured sites [closed]

I am trying to get some understanding on differences between unsecured (http:// accessed) and SSL secured (https://) websites on Apache servers. So I am not trying to solve a specific problem right ...
1
vote
0answers
234 views

Multiple SSL server blocks with nginx on single ec2 instance

I've asked this question before and I think I found a potential answer on the nginx Website, which is to have multiple internal IPs for the Web server to listen on. I don't know how to do that with ...
1
vote
1answer
26 views

What are the advantages of using Blogger's HTTPS with custom domain?

Blogger's HTTPS is now available for custom domains too. I am currently using Cloudflare SSL and they automatically apply it to all HTTP requests, and changes "http" to "https" for all resources or ...
2
votes
1answer
24 views

Will linked references still work after i change a site to https?

We're looking at changing a site from http to https. There are some 3rd party sites that hotlink / link to reference images on our site (we have allowed them to do this) but there <img ref="#">...
2
votes
1answer
1k views

SSL Labs Cipher Strength < 100%, why? How do I make it?

I am in a progress of trying (again) to get maximum (or almost maximum) score on SSL Labs with my site. I currently do not understand, why it does not give me full Cipher strength score. Now, it ...
0
votes
1answer
294 views

htaccess force HTTPS except two pages

I would like to force HTTPS (SSL) on every page except /es-ES/calculador-cuatro-pilares-destino-bazi.html or /en-US/bazi-calculator.html. How can I do that? I am using Apache HTTP Server (ver 2.2.x). ...
1
vote
0answers
63 views

After installing SSL through cpanel in shared hosting I get warnings and errors with subdomains and SMTP without SSL or TLS

I manage my wordpress site that is hosted in a shared hosting plan, but I am not a web developer. A couple of days ago, I purchased an SSL and migrated from http to https with the help of a wordpress ...
4
votes
1answer
643 views

How to add force https to htaccess file RewriteRule with _route_=$1

I inherited support for an Opencart 1.5 site which needs to have SSL enabled. I've edited the config.php files in / and admin/ and adding https:// to the URL is working in the browser and links are ...
2
votes
1answer
58 views

Loss of Mozrank since migration to HTTPS without changing .htaccess

Some months ago I migrated to HTTPS after which my site has continued to lose Mozrank. I am using really simple SSL plugin for setting https://. However, I have enabled it without letting it edit ....
0
votes
2answers
3k views

How do I show the company name in the browser address bar next to the SSL padlock?

I have an SSL certificate for my website. I want to show the name, owner, owner unit in the browser address bar just like Github has. See the red rectangle: How can I set that?
0
votes
1answer
106 views

Rewrite a directory to different host

I have inherited a website that was working, but another technician broke it, and now I have been hired to fix it. The primary domain is hosted at GoDaddy a very simple html site 25 pages or fewer. ...
0
votes
2answers
69 views

How to redirect website with SSL (HTTPS) to without SSL (HTTP)?

I have a WordPress site on a domain that used to be HTTPS, example domain https://example.com. I now want to remove HTTPS temporarily. How do I do that? I have tried to add the following to my ....
1
vote
2answers
88 views

When redirecting HTTP to HTTPS, which URLs should be in the sitemaps?

Recently I've installed SSL certificate on my website and added a 301 redirection on my website for all links. Previously my sitemap included HTTP links and almost my 5000+ pages are now indexed on ...
2
votes
1answer
74 views

HTTPS request connection timeout (NGINX)

I tried a lot by reading different answers on Stackoverflow and other forums but unable to identify the error, can someone please check the below configuration and tell me what could be wrong? server ...
3
votes
2answers
2k views

nginx http to https redirect - just isn't working

I am running my own webserver with nginx on ubuntu 17.10. I have opened ports 80 and 443. Trying to get the HTTP to HTTPS redirect working, but everthing i seem to have tried fails. i am still ...
1
vote
0answers
492 views

Get a Lets Encrypt SSL certificate through ZeroSSL for a .ovh.net subdomain

I'm trying to set up https connection in one of my API. I normally make requests to my API through this address: http://vps******.ovh.net:8090 I'd like to be able to make HTTPS requests. I use the ...
2
votes
1answer
118 views

How to fix a redirect from naked domain that times out when https is put in front but works with http

I am a developer and have very little knowledge of DNS and hosting, etc. A client for an app I have inherited recently switched over to running everything over https only. However when this URL ...
1
vote
1answer
1k views

How to avoid SSL warnings about certificate not for the current site when redirecting alternate domains?

I have multiple domains forward issue. Domains with plurals and singular e.g.: example.com, examples.com, example.biz, examples.biz I forwarded all of them to https://examples.com and https://...
2
votes
2answers
76 views

Blog is only indexed in Google search under HTTPS and not HTTP

I searched Google for my title match website is not there in the first 300. Domain age close to 9 years. The website has been live since then, though I have actively started maintaining it from ...
0
votes
1answer
434 views

Adding LetsEncrypt to Tomcat/Apache setup with mod_jk

I have a Tomcat server running behind Apache using mod_jk (the AJP connector in Tomcat). I just tried adding SSL to this setup with LetsEncrypt, but certbot was unable to verify that I own the domain ...
0
votes
1answer
28 views

Should anyone be getting this error message from T-Mobile? [closed]

A friend of mine was trying to sign into their T-Mobile account to pay their bill when they saw this strange message. Welcome, first and last_name Method Not Allowed The requested method POST is ...
2
votes
0answers
575 views

First Byte Time is slow after SSL installation

This is the first time I try to install SSL for one of my clients but I can't figure out what I am doing wrong. Here is without SSL: https://www.webpagetest.org/result/...
1
vote
2answers
679 views

how to use .htaccess to redirect http to https for 3 domains cPanel

I have 3 domains. 2 are Addon domains, 1 primary on my cPanel. I do not know if this is possible but from .htaccess how can I set this up: example1.com (Primary) example2.com example3.com This is ...
1
vote
1answer
43 views

I need to build a website working with old browsers - SSL, non-SSL and SEO - How to have both versions

I have to build a website which should be accesible from newer browsers and from older browsers (IE5+!!!). And also, the website needs to have good SEO, and match the latest Google ranking rules. The ...
1
vote
1answer
21 views

Is Google analytics tracking all of my traffic? on all accessible variations/properties

I am wondering is Google analytics track all of my properties? https://www.example.com (SSL + www) https://example.com (SSL - www) http://www.example.com (Non-SSL + WWW) http://example.com (Non-SSL - ...
2
votes
1answer
584 views

404 status code for HTTP/2

How does a correct 404 status code look like on using HTTP/2 protocol? HTTP/1.1 404 Not Found seems to be for the previous protocol version, but I can't find anywhere something meaningful about status ...
3
votes
1answer
219 views

HTTP website returns 403.4 even when using Plesk Permanent SEO-safe 301 redirect from HTTP to HTTPS

My domain has a valid and activated "Let's Encrypt!" certificate, and going to https://example.com works as it should and shows as being secure in the browser. Through Plesk Onyx 17.5.3 I have ...
0
votes
1answer
33 views

Quickest way to let Google know a site no longer has SSL? [duplicate]

I've removed SSL from a website, permanently. I would like Google (and other search engines) to pick this up ASAP as of course people will be seeing a warning/error in their browser when they click ...
0
votes
0answers
19 views

Why my emails go to spam [duplicate]

Now dont get me wrong, i did everything i possible can to ensure that my smtp server is GOOD, i use high quality content so this is not content issue. i never sent email to anyone besides my self for ...
2
votes
1answer
168 views

Showing company name in address bar requires SSL EV certificate, or OV also OK?

I remember in the past I had to buy an SSL EV certificate (which are much more expensive than regular SSL certificates) to get the company name displaying next to the green lock in the address bar. I ...
1
vote
2answers
179 views

Apache2 https and www redirects

I wanted to submit my website on my own Debian Apache2 server to the HSTS preload list. It told me I have several things incorrectly set up, so I made adjustments, now it seems to be satisfied. There ...
1
vote
0answers
47 views

My site doesn't have a SSL certificate, but Google is indexing the HTTPS version [duplicate]

Redirecting to HTTPS causes an error, Google should be indexing the HTTP version. How can I enforce that? I have no forms or logins on my website, I have no SSL certificate. For example: Searching ...
1
vote
1answer
100 views

Wordpress blog subdomain redirects to main site after switching to HTTPS

While there are a number of online instructions to change Wordpress from HTTP to HTTPS, they are not working for me, probably because my installation is in a subdomain. Here is the starting situation:...
2
votes
1answer
51 views

What entry should be put into the Domain Name, when it comes to SSL Certificates for a Plesk VPS?

I am currently in the process of securing a VPS of mine, with the Let's Encrypt SSL Certificate. Referring to the below image, was is required, when 'The domain name must resolve to your server'? ...
2
votes
0answers
34 views

httpS pages crawled while never bought SSL Certificate [closed]

I have a website built in WP. I never bought any ssl certificate for my website, nor a single link pointing to httpS, however, 02 of the pages are crawled with httpS, while rest pages are with http. ...
3
votes
1answer
71 views

Google Analytics seems to be affected after setting preferred domain

I hope you can assist me with this! I've recently changed the preferred domain for my site https://example.com. Unfortunately, after doing so, it appears that views/visits are no longer being recorded ...
2
votes
0answers
152 views

SSL Caching prevends https requests

I use the W3 Total Cache Plugin for Wordpress. If I enabled "Cache SSL (https) requests" in W3 Total Cache and testing my site at https://securityheaders.io for security reports, then I get only one ...