We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [https]

HTTPS is the secure version of the hypertext transfer protocol (HTTP). It usually uses port 443 and is powered by the TLS (formerly SSL) cryptographic protocol.

Filter by
Sorted by
Tagged with
9
votes
3answers
5k views

Are drops in Google ranking common after switching to https?

About a week ago I made the switch to https on one of my sites. I'm positive I did everything right. Properly setup 301 redirects from http to https versions. Added and verified https version in ...
119
votes
5answers
215k views

Moving from HTTP to HTTPS in Google Search Console

I'm moving from HTTP to HTTPS for my entire site. The site is currently added to Google Search Console (formerly Google Webmaster Tools) as www.example.com and all the pages are indexed without using ...
16
votes
1answer
4k views

Should I submit https:// and http:// in Google Search Console both with and without the www?

In my site I'm redirecting everything (http://, http://www., https://) to https://www.example.com. Google webmaster tools says: Make sure you add both "www" and "non-www" versions for your site. Also,...
17
votes
8answers
13k views

Huge drop [50%] in traffic after HTTPS move

Currently look after 3 websites. I changed one of them to be HTTPS as it's ecommerce, however have seen a huge drop in organic traffic since this was implemented. Went from around 800 impressions to ...
17
votes
2answers
11k views

StartSSL certificate gives SEC_ERROR_REVOKED_CERTIFICATE in Firefox and ERR_CERT_AUTHORITY_INVALID in Chrome

My existing HTTPS certificate is expiring soon so I bought a new one. I'm having a very hard time installing it properly though. I have a wildcard certificate from StartSSL for *.deadsea....
3
votes
3answers
1k views

HTTP to HTTPS: Wait for new sitemap to be indexed?

Running HTTP and HTTPS versions of the site side-by-side. HTTP is canonical right now. Goal is to change that to HTTPS. Created a new site in Search Console and submitted a new sitemap 4 days ago. ...
92
votes
5answers
13k views

How do I transition to SSL without affecting PageRank?

Here at Stack Exchange we're working on moving all traffic to SSL. The reason we're not doing logged-in-users only is that one side of the login divide would suffer a redirect from Google every time. ...
11
votes
6answers
878 views

SSL certificate provider

I need a SSL certificate for a new site I'm building and I have to choose a SSL provider. What to look for when choosing and what's your experience dealing with them? Thanks!
28
votes
4answers
4k views

Is using only HTTPS bad in a SEO perspective?

I would like to set up a new business site. I plan to direct www.example.com to example.com and only use that domain. My plan is also to only use HTTPS and not HTTP. Does this affect the SEO for the ...
9
votes
1answer
2k views

Should we get an EV Certificate?

Our regular SSL provider is offering EV certificates for under $US200, and it just so happens that the certificate for our B2B e-commerce site is expiring in a month (which should give us enough time ...
11
votes
3answers
20k views

How to prevent access to website without SSL connection?

I have a website that has an SSL certificate installed, so that if I access the website using https instead of http I will be able to connect using a secure connection. However, I have noticed that I ...
22
votes
5answers
859 views

Force Using SSL on Site now?

I am starting to see a majority of websites starting to use SSL as a standard practice for viewing the website securely now thanks to the revelations of Edward Snowden about the NSA surveillance that ...
11
votes
6answers
8k views

Forcing SSL and www in .htaccess

I'm looking for a way to force SSL and www. I've been able to force both separately but together I keep running into redirection issues. The following code works when handling a URL in this format: ...
5
votes
1answer
885 views

“https://” refers to random site, “http://” is broken, but “http://www” works

I'm running a website which is acting extremely strange. At the time of writing, this link works: http://www.example.com This link doesn't: http://example.com But it does work if you copy/paste it ...
8
votes
3answers
21k views

htaccess redirect non-www to www with SSL/HTTPS

I want a rewrite rule that redirects everything to https:// AND www. For example http://example.com should be going to https://www.example.com This is what I have: RewriteEngine On RewriteCond %{...
39
votes
6answers
4k views

Are the different types of SSL certificates a bit of a scam?

I'm looking into getting a few SSL certificates for domains to cover the following: autodiscover.example.com remote.example.com www.example.com Wildcard certificates are too expensive, so I'm going ...
32
votes
7answers
42k views

Why is godaddy HTTPS/SSL certification so much cheaper than digicert, thawte, and verisign?

I am a novice on HTTPS/SSL but GoDaddy charges $12.99 and Digicert, thawte, and Verisign charge $100-1000+ for SSL certificates. I must be missing something on the quality of the encryption or ...
30
votes
4answers
7k views

What are the benefits of a more expensive SSL certificate?

I've been comparing prices of different SSL certificates and found a massive difference in prices between different providers. If we take http://www.namecheap.com/learn/other-services/ssl-...
6
votes
3answers
15k views

Google Analytics: How can I track between http:// and https:// profiles for a domain?

I'm trying to set up tracking on a project that I'm working on. The main site is at http://www.example.com/ The order page is at https://www.example.com/index.php Currently they have two different ...
4
votes
4answers
3k views

Firefox reports HTTPS page to contain non-secure elements

When I visit our web site pages with IE over HTTPS, it reports the web site as protected (i.e. no elements are taken using HTTP). The same page, when loaded to Firefox, causes Firefox to complain that ...
10
votes
2answers
2k views

Is incorrect to have the HTTPS version of the sitemaps.org URL in the xmlns sitemap schema?

I have the schema with this: <sitemapindex xmlns="https://www.sitemaps.org/schemas/sitemap/0.9"> Is it correct or should be: <sitemapindex xmlns="http://www.sitemaps.org/schemas/sitemap/0....
6
votes
2answers
209 views

Switching to HTTPS - redirect question

Following the recent Google announcements about improved ranking for sites running on https we have a number of clients asking about this. Is it safe to just 301 redirect all pages to their SSL ...
2
votes
2answers
845 views

Search traffic dropped with HTTPS implementation

We have launched HTTPS version of site at 6 Oct. After few days (8 Oct.) Google dropped 40% of normal search traffic, and more 20% within next 2 days. SSL certificate was bought from GoDaddy, and ...
55
votes
12answers
6k views

What is the benefit of forcing a site to load over SSL (HTTPS)?

Let's say I have a large content-only site; no login or logout, no usernames, no email addresses, no secure area, nothing secret on the site, nada. People just come to the site and go from page to ...
23
votes
6answers
35k views

Is unique IP address a must for SSL?

The shared hosting company told me that if I buy an IP address then it will be applicable for the addon domains too. What does it mean? Then the SSL certificate won't work since there will be more ...
8
votes
2answers
819 views

Ad service that supports ssl (secure publishing)

Is there an add service like adsense that supports SSL ads? I wish to put ads on a secured (https) pages but Google Adsense doesn't support it. I know Adbrite works for text based SSL ads but I ...
5
votes
4answers
683 views

New Google SEO benefit with SSL - with only a few sections in SSL, or always on?

Google just announced that SSL will affect site ranking positively: http://googlewebmastercentral.blogspot.se/2014/08/https-as-ranking-signal.html I have an Easter Island tourist agency called Easter ...
4
votes
1answer
3k views

How can mixed content compromise an entire HTTPS session?

Google Chrome is probably one of the stricter browsers out there in terms of highlighting SSL errors. Most browsers will point out when you are viewing an HTTPS page which loads insecure images/...
6
votes
6answers
6k views

Identify “non-secure” content IE warns about [closed]

As many know, if you serve a page over https and the content loads resources (images, stylesheets, js, SWF objects, etc) over http, older versions of Internet Explorer will show the user a warning ...
6
votes
1answer
3k views

Redirect from SSL HTTPS to HTTP (NO SSL)

Many of my visitors have bookmarked my site already with https://mydomain.com. Under the bad advice of a programmer I have put my whole site (Joomla) using SSL. I do not sell anything or provide any ...
6
votes
1answer
3k views

redirect various http domains to certain https domain via htaccess

I have a bunch of domain names with different TLDs. What I want is to point several domains to the "main"-domain which has a SSL cert (single domain). Like this: https://maindomain.com (main domain ...
9
votes
2answers
351 views

User contributed images on a HTTPS site without mixed content warnings

I have a forum where, like most forums, users can post images. I've set up HTTPS across the site, but of course most external images are linked using HTTP, not HTTPS. So loading the forum over HTTPS ...
8
votes
1answer
5k views

Secure and non-secure Schema.org Markup?

Is it possible to have schema.org itemtypes for both secure and insecure ports? I run a static-ish site made in Jekyll, and am implementing Schema.org on the individual pages. As a result, I'm ...
7
votes
3answers
614 views

How do I remove HTTPS results from Google after the domain has been redirected and the SSL certificate taken down?

I need to remove HTTPS results from Google search rankings for the domain A that has been redirected to another domain B. So domain A does not have any pages on it at the moment and it will not have ...
7
votes
1answer
274 views

If a website is accessed on HTTPS instead of HTTP, should the URLs on the sitemap be HTTPS or HTTP?

I have changed my website from HTTP to HTTPS. At this moment, I have the next rewrite rule working to redirect calls for HTTP to HTTPS: RewriteEngine On RewriteCond %{SERVER_PORT} 80 RewriteRule ^(...
5
votes
5answers
2k views

Do you need to disavow on [HTTPS SSL] after performing a disavow on [HTTP]

I have a client which disavowed a few thousand dirty links from his site profile back in February 2015. Recently the site was switch from HTTP to HTTPS (SSL enforced). Google recommends that you add ...
5
votes
3answers
2k views

EV SSL Certificates - does anyone care? [closed]

Is any one aware of any data or studies from an impartial source that show the impact of EV SSL certificates on customer behavior? I've been unable to find any such studies. If an EV SSL certificate ...
3
votes
3answers
3k views

HTTPS and HTTP URLs point to different places?

I own and use a domain for a project. When I type in my domain preceeded by HTTPS instead of HTTP, I am re-directed to a compromising website. How is this possible? Did somebody buy the HTTPS ...
2
votes
2answers
179 views

SSL Certification on both www and no-www domains

We've got our website running and HTTPS / SSL works just great. EXCEPT: when users enter http://www.mydomain.com and then enter the secure area and get directed to https://www.mydomain.com it works ...
2
votes
1answer
610 views

Duplicated content www on subdomain and SSL

I have a eCommerce based on OpenCart, but I was wondering about change my domain name for SEO purposes. For me the critical thing about my changes are the imminent possibility of domain change, I'm ...
2
votes
0answers
445 views

Which penalties are possible when switching from HTTP to HTTPS [closed]

When switching our website from HTTP to HTTPS, things went catastrophic: Page impressions went down from average 60 (peak 110) to below 10 (per day). Traffic from search engines dropped to zero. In ...
1
vote
1answer
951 views

Redirect http www and non-SSL domains to HTTPS without multiple redirects?

I'm losing link juice in multiple redirects. I need to redirect all domain versions to my default domain i.e. https://example.com By all domain versions I mean http://www, http://, https://www and ...
12
votes
1answer
11k views

Multiple IP addresses for one SSL certificate

Is it possible to register an SSL Certificate for Multiple IP addresses? This is needed for one of my sites; which runs on two different servers with different IP addresses. One server is live; while ...
8
votes
3answers
5k views

HTTPS best practices for SEO and usability

Consider a page, http://example.com, which can be viewed both publicly and when a user authenticates. Now suppose you enable HTTPS for every page when a user logs into your website, but only when they ...
6
votes
3answers
14k views

Properly force SSL with .htaccess, no double authentication

I am trying to force SSL with .htaccess on a shared host. This means there I only have access to .htaccess and not the main VirtualHost configuration. I know you can put a rule in the VirtualHost ...
8
votes
5answers
233 views

What do I need to do to enable my site to accept credit cards?

I want to store my customers' credit card information in my database so that they can quickly check out again without having to re-enter their info. What do I need to know about security/https/etc to ...
8
votes
2answers
5k views

How to serve static content without https in a secure site?

I want to serve static content from my site but my site is https-only. My static http server only serve http content (non https) but many IE users are complaining about being unable to log into. What ...
7
votes
4answers
9k views

Is there a way to disallow crawling of only HTTPS in robots.txt?

I just realized that Bingbot is crawling my company's website's pages over https. Bing already crawls the site over http, so this seems frivolous. Is there a way to specify Disallow: / for https ...
16
votes
2answers
592 views

If I need HTTPS / SSL encryption on my web site, does it matter who I get my certificate from?

If I need HTTPS / SSL encryption on my web site, does it matter who I get my certificate from? Are some SSL certificate vendors better than others? If so, why?
11
votes
4answers
1k views

Does SSL really matter for most websites?

I've been pretty paranoid about learning to "do security right" for this site I'm building (first non-trivial site I've made), and I've noticed something that bothers me: SSL. I've read plenty of ...