Podcast #128: We chat with Kent C Dodds about why he loves React and discuss what life was like in the dark days before Git. Listen now.

Questions tagged [https]

HTTPS is the secure version of the hypertext transfer protocol (HTTP). It usually uses port 443 and is powered by the TLS (formerly SSL) cryptographic protocol.

Filter by
Sorted by
Tagged with
10
votes
6answers
2k views

HTTPS for entire site

I'm working on a fairly standard web site with public content plus personal/customized content for registered users. I know I need to use HTTPS when users are logging in or sending credit card ...
3
votes
5answers
2k views

What is the best kind of checkout system for a website?

I have worked with quite a few checkout systems and eCommerce platforms. Are there certain kinds of interfaces that convert sales better than others? For me there are really only two questions: SSL ...
11
votes
6answers
878 views

SSL certificate provider

I need a SSL certificate for a new site I'm building and I have to choose a SSL provider. What to look for when choosing and what's your experience dealing with them? Thanks!
11
votes
2answers
213 views

Choosing which domain to secure

We've got a website that is served on both www.example.com and just example.com - we've never done any sort of forcing users from one domain to the other, so if they land on example.com then that's ...
3
votes
4answers
936 views

is RapidSSL wildcard cert supported by major browsers?

I'm thinking of buying a wildcard SSL cert from clickSSL : http://www.clickssl.com/rapidssl/rapidsslwildcard.aspx That would be a rapidssl certificate, and I was looking into my firefox options to ...
6
votes
1answer
5k views

Thawte/GeoTrust/VeriSign 2048 Bit Root migration and Intermediate SSL Certificates

Thawte, GeoTrust, VeriSign and other Certificate Authorities are currently in the process of changing from a 1024 bit MD5 based root certificate to a 2048 bit SHA-1 based root to "keep in line with ...
16
votes
2answers
15k views

Is there a way of using HTTPS with Amazon's CloudFront CDN and CNAMEs?

We use Amazon's CloudFront CDN with custom CNAMEs hanging under the main domain (static1.example.com). Although we can break this uniform appearance and use the original whatever123wigglyw00....
8
votes
2answers
5k views

How to serve static content without https in a secure site?

I want to serve static content from my site but my site is https-only. My static http server only serve http content (non https) but many IE users are complaining about being unable to log into. What ...
28
votes
2answers
87k views

Can I skip the PEM pass phrase question when I restart the webserver?

After buying a multi-domain SSL certificate I have started testing it with the Nginx webserver (following documentation in their SSL wiki page). Everything is fine, it works and I get a green ...
5
votes
3answers
5k views

Is it possible to share SSL certificates across servers?

We have a web application we will be launching soonish and for right now we just have one SSL/HTTPS certificate. We have this one certificate shared across 3 servers(in a cluster for load balancing) ...
11
votes
2answers
2k views

Using wildcard certificates for multi-server deployment

Currently we are deploying a beta API for our services and we want that all request/responses from the API works over https. I'm confused about using wildcard certificates for both api and www urls. ...
39
votes
6answers
4k views

Are the different types of SSL certificates a bit of a scam?

I'm looking into getting a few SSL certificates for domains to cover the following: autodiscover.example.com remote.example.com www.example.com Wildcard certificates are too expensive, so I'm going ...
8
votes
5answers
233 views

What do I need to do to enable my site to accept credit cards?

I want to store my customers' credit card information in my database so that they can quickly check out again without having to re-enter their info. What do I need to know about security/https/etc to ...
16
votes
2answers
592 views

If I need HTTPS / SSL encryption on my web site, does it matter who I get my certificate from?

If I need HTTPS / SSL encryption on my web site, does it matter who I get my certificate from? Are some SSL certificate vendors better than others? If so, why?