Questions tagged [https]

HTTPS is the secure version of the hypertext transfer protocol (HTTP). It usually uses port 443 and is powered by the TLS (formerly SSL) cryptographic protocol.

Filter by
Sorted by
Tagged with
4
votes
3answers
2k views

SSLCipherSuite settings not taking effect from Apache ssl.conf, only when duplicated in each virtual host

I have an odd issue. The SSLProtocol config is getting applied in my ssl.conf file but the SSLCipherSuite config is not. I have tested this by changing each option and running scan with Qualys SSL ...
1
vote
1answer
20 views

SSL certificates: Does a secondary domain which does only redirect need a seperate SSL certificate?

Some customer gave me the input that if you have a website with a domain like https://www.example.com which has a lot of secondary domains only redirecting like https://www.example.eu https://www....
1
vote
1answer
100 views

Will referrer info get lost in Google Analytics if i 301 from HTTP to HTTPS?

If we have a bunch of backlinks from HTTPS sites, but they link to the http://example.com version of our site or example.com. Even if our site is HTTPS and once traffic gets driven to those URLS ...
1
vote
0answers
20 views

All HTTP URIs redirect to the HTTPs of homepage [closed]

I have an issue on my website, where all http URLs redirect to the https of the homepage. For example, http://example.com/ppc-services/ redirects to https://example.com/ I have added this to ....
1
vote
1answer
51 views

Serve all pages over https not just homepage

I want to serve all of my website pages over https, but currently my htaccess only serves the homepage over https. This is the code I have in my htaccess file: <IfModule mod_rewrite.c> ...
3
votes
2answers
84 views

Google Analytics seems to be affected after setting preferred domain

I hope you can assist me with this! I've recently changed the preferred domain for my site https://example.com. Unfortunately, after doing so, it appears that views/visits are no longer being recorded ...
2
votes
1answer
30 views

External ip opens router config panel, can I configure port forwarding over port 80

My home is armed with a DIR-868L D-Link router and I am trying to host a website from my PC behind it on the local IP 192.16.0.198 port 32768 (which I can configure). I tried configuring port ...
2
votes
2answers
824 views

How to transfer an SSL certificate from one cPanel account to another? Do I need to transfer it? I have WHM with the new account

I've moved a site to a new hosting account, and need to get SSL working again. On the old hosting account, as I understand it, the hosting provider just issued free Let's Encrypt certificates and ...
1
vote
0answers
19 views

How to prevent Chrome from showing “🛈 Not secure” for my website in the URL bar? [duplicate]

I have uploaded my website in my IIS using static IP. whenever I access it from local or remote it was showing "not secure". How do I resolve this issue?
1
vote
1answer
33 views

What is the difference of certbot and certbot-auto?

I've seen many documentation of using certbot for renewing the certificates via certbot renew. There were also other documentations but with certbot-auto. I'm confused, what is the actual difference ...
1
vote
2answers
30 views

WordPress website has SSL certificate but some HTTP elements (images)

My website is secure (HTTPS) but has some images that are HTTP. I have two questions: Is it an issue? I checked on HubSpot SSL checker and it says that my website is secure. How do I find and change ...
2
votes
1answer
26 views

Duplicate problem on Google Search Console

I use free hosting and a free site maker. After a while, I added my own domain via DNS settings. I faced a major problem after this. My new pages are not being indexed because Google detects duplicate ...
62
votes
5answers
8k views

Why should I pay for an SSL certificate?

I paid for an SSL certificate from Namecheap, I think it was certified by ComodoSSL. It cost me 7$, it took them a week to activate and I had to do it myself from SSH while editing my site's ...
40
votes
5answers
8k views

What events caused mass migration to HTTPS?

For several years I see that Google, Facebook, etc start serving (and even redirect to) content via HTTPS. Serving sites that prompts passwords in insecure HTTP was wrong even in 1999 but it ...
3
votes
1answer
50 views

What is the Cloudflare equivalent of these two .htaccess redirect rules?

I usually set up my sites to rewrite URLs in the following cases: All http traffic is redirected to https (and www), with a 301 All non-www traffic is redirected to www (and https), with a 301 In ....
0
votes
0answers
14 views

Both Http & Https are showing in SERP [duplicate]

We migrated to Https in Jan 2018. We redirected(301) Http urls to Https. That redirection is working fine. But suddenly from November both URLs are coming in SERP. Please suggest how to get rid of ...
1
vote
3answers
6k views

How to decrease HTTPs redirect wait time?

I use a wordpress plugin to redirect my website to HTTPs however I have noticed a redirect time of 500 ms Which takes the time to first byte to 800 ms. How can I reduce the redirect time?
2
votes
1answer
665 views

Site unexpectedly closed the connection when in HTTPS

I make no bones about it. I am a noob at websites. Saying that I tend to research questions before asking for help. Today I was working with Hostgator to get SSL on my site. They got it on there and ...
3
votes
3answers
172 views

Switching domain from HTTPS to HTTP

I recently launched a new site on an existing domain, using new hosting. The previous site utilized HTTPS, the new site does not (just HTTP). The problem I ran into is that Google currently has the ...
2
votes
3answers
145 views

Using htaccess to force HTTPS doesn't work

NEW EDIT 28/oct/19 → I edited the .htaccess file as you said AddHandler x-mapp-php5.5 .php # HTTP to HTTPS redirect RewriteCond %{SERVER_PORT} 80 RewriteRule (.*) https://www.bebechan.net/$1 [R=301,...
1
vote
1answer
189 views

Trouble activating free SSL from Domain.com when using Hostinger as a web host

Recently, I transfered my domain from GoDaddy to Domain.com. My hosting is still provide by Hostinger.com. Domain.com have an option of Free SSL. You just enabled it to get SSL Certificate and you don'...
0
votes
1answer
117 views

Redirecting a domain works on HTTP but not on HTTPS with IIS server

We built a site for a client to advertise a new block of apartments they had built. The apartments have now all been sold so we have been asked to forward the domain to another domain until there is ...
2
votes
1answer
51 views

Facebook shows blank image and preview after sharing a HTTPS link from my website

My site before was only HTTP. I used that website for sharing public information with my friends. I like to post news that I want then share it to Facebook and when I post a link (HTTP link since my ...
6
votes
3answers
93 views

Drop in referral data due to HTTP, changed to HTTPS no recovery referral data since (in the last year)

We changed our site from HTTP to HTTPS about a year ago. We have a static website, with no functionality for user input, so did not see it as an imperative to change to HTTPS anytime sooner, the ...
7
votes
3answers
213 views

What can I do to pay less for SSL?

I currently have a web hosting account and 27 domains that cost 1310 PLN (about $358.37) per year. Because the next version of Chrome will start displaying "not secure" warnings when a user enters ...
1
vote
1answer
13 views

.htaccess HTTPS fowarding still redirecting to a folder which I have removed from the rule

I have the following simple code in my .htaccess file in order to forward my domain to the HTTPS version of the website: RewriteEngine On RewriteCond %{SERVER_PORT} 80 RewriteRule ^(.*)$ https://...
1
vote
1answer
56 views

Track HTTP and HTTPS traffic details separately on Google Analytics?

How can I track HTTP and HTTPS traffic details separately from Google Analytics.
2
votes
1answer
174 views

Forcing all requests to HTTPS vs not forcing all requests

I'm not new to cleaning up mixed content errors after switching from http to https and I'm not new to working with the htaccess file but I am new to actually implementing the rules for http to https ...
1
vote
1answer
144 views

How to Install Free Lets Encrypt SSL Certificate on GoDaddy Managed WordPress Hosting?

I'm posting this question here along with an answer for reference in case anyone else is wondering how to install free SSL certificates from Let's Encrypt on GoDaddy Managed WordPress plans. The ...
1
vote
0answers
17 views

Why does everyone prefer SSL Offloading?

I started to setup a Reverse Proxy on Windows Server 2012 R2 with IIS and the AAR module installed (but purely as a Reverse Proxy without load balancing). It was relatively easy to setup a URL Rewrite ...
1
vote
1answer
73 views

Configuring domain name to cover multiple hosts

Background: I currently host my public-facing website on GoDaddy servers. I am developing the server backend of a mobile application. The business logic and database are hosted on separate instances ...
4
votes
1answer
55 views

How would you implement redirects for domain canonicalization, no-www, and HTTPS for IIS 7.5

For the moment I'm stuck with an IIS-server, unfortunately not my best subject (I'm much better w. Apache). We have a site on a Win 2008 R2 Server with IIS 7.5. It's an old site and we are working on ...
2
votes
2answers
973 views

How to add lock symbol to my website using private SSL in https pages

I just purchased SSL for my website from hostgator, so that I can add lock symbol in my website, when users visit https://www.mysite.com For example: Now they have installed the certificate, but I ...
16
votes
1answer
4k views

Should I submit https:// and http:// in Google Search Console both with and without the www?

In my site I'm redirecting everything (http://, http://www., https://) to https://www.example.com. Google webmaster tools says: Make sure you add both "www" and "non-www" versions for your site. Also,...
0
votes
1answer
20 views

Bad route appended to URL when redirecting from http to https

I have a WordPress site hosted on OVH and I'm having issues when redirecting from http to https. http://www.example.com redirects nicely to https://www.example.com https://www.example.com redirects ...
1
vote
2answers
69 views

Apache redirect HTTP to HTTPS without preventing HTTP

Background I've added an SSL cert using Lets Encrypt/Certbot on my Debian 9 (Stretch) host. To modify my Apache configuration, essentially certbot copies the vhost.conf file, wraps it with and ...
1
vote
2answers
134 views

What makes Open Graph checkers unable to detect Open Graph data?

My page, after adding SSL certificate, cannot have preview fetched by Facebook or Twitter when sharing the link. I have followed The Open Graph protocol and include the following open graph tags: &...
11
votes
6answers
8k views

Forcing SSL and www in .htaccess

I'm looking for a way to force SSL and www. I've been able to force both separately but together I keep running into redirection issues. The following code works when handling a URL in this format: ...
1
vote
0answers
29 views

Why does turning off “Force SSL with https redirect” keep http links redirect to https?

I realize this question can be an XY one. After upgrading my site from http to https, FB OpenGraph og:image not pulling images anymore. The solution seems to be using http links rather than https in ...
0
votes
0answers
280 views

Exception: System.Net.WebException: The underlying connection was closed - IIS

I have very strange trouble and it's difficult to me to find solution for this error. Currently i have some services (.NET) hosted on the IIS on different servers. On one of the servers there are ...
1
vote
0answers
16 views

Should my sitemap and robots.txt have http or https urls for the given scenario [duplicate]

My website is running on node.js and runs in http on port 3000 I am using NGINX to enable https access so that all pages are served as https I have placed my sitemap.xml and robots.txt inside the ...
0
votes
1answer
29 views

HTTPS time out for newly installed SSL certificate on Nginx

Recently I bought a SSL certificate on GoDaddy and set it up in my Nginx server like this: server { listen 443 ssl default_server; server_name www.mywebsite.example; ssl on; ...
1
vote
1answer
46 views

Researching .htaccess Syntax

In my template .htaccess file I have been copying and pasteing alot of rules and researching .htaccess for around 2 weeks in an attempt to try and better understand the syntax, different modules & ...
7
votes
3answers
11k views

Do internal intranet websites need to be secure?

The question is in the title. Does an internal site need to have https security? For example we have an internal site that handles our client's license keys -- do we need for that to be secure since ...
3
votes
1answer
7k views

How can I force a VirtualHost in Apache to not listen for undefined subdomains on 443?

In /etc/apache2/sites-available/example.com: <VirtualHost *:443> ServerName www.example.com DocumentRoot /var/www/example.com/htdocs SSLEngine on ...
0
votes
0answers
76 views

OVH active SSL for domains used for redirection

I have 2 domains: domain-a.example is my main website and domain-b.example is a domain used to redirect users to my main website (domain-a.example). On my ovh dashboard I set the redirection from ...
4
votes
2answers
561 views

How to use the private and public keys?

I am new to ssl certificates, i wanted to learn about ssl certificates, and I generated private and public keys myself while logged into cpanel, I wonder how to use those and generate a secured ...
4
votes
1answer
3k views

Does changing from HTTPS to HTTP kill my backlinks?

I had only my main page changed to HTTP to test out if I want to change from HTTPS to HTTP. All my backlinks are to my HTTPS site. Will I lose all of my backlinks and have to start over when switching ...
0
votes
1answer
106 views

New SSL certificate is not propagated

I have installed a new SSL certificate on my server and removed the old one but when I open the website using new PC and new browsers, I still view the old certificate in the browser. I have windows ...
0
votes
1answer
27 views

Why does a domain-validated certificate issued by certificate authority for example1.com works on example2.com?

Doesn't that completely defeat the purpose of having the first domain verified by a certificate authority when the certificate also works on other domains? How are they different from self-signed ...