We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [https]

HTTPS is the secure version of the hypertext transfer protocol (HTTP). It usually uses port 443 and is powered by the TLS (formerly SSL) cryptographic protocol.

Filter by
Sorted by
Tagged with
4
votes
1answer
39 views

HTTPS implementation. Should I change pre-head tags?

I implemented HTTPS on all the webpages of my website. My browser tells me it's a "Secure connection" with a green signal. I double-checked that all the images, CSS files, JS files, etc. were HTTPS, ...
1
vote
0answers
36 views

What issues will I encounter if the new /shop section of my website is HTTPS

I am about to launch a new section of my website which is a small store for gift vouchers and a few branding products. My site is well ranked/positioned in Google organically and paid. However, for ...
1
vote
1answer
2k views

How do I prevent a rewrite rule from executing for just one subdomain?

In the root level .htaccess I have added a condition to rewrite HTTP requests as HTTPS: RewriteEngine On RewriteCond %{HTTPS} !on RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} This applies to ...
1
vote
1answer
346 views

SEO sitemap pending in Google after SSL change

I have a site http://www.example.com It has a valid site map at http://www.example.com/sitemap.xml The site is running through netilfy.com I recently enabled SSL in Netlify, now all pages are ...
2
votes
2answers
91 views

Can WordPress accept HTTP and HTTPS connections on the same blog?

While working on the transition from HTTP to HTTPS, I have configured all websites to accept both HTTP and HTTPS connections. This worked for everything except WordPress. There is an option in the ...
1
vote
2answers
2k views

HTTPS. Solution for “This page is trying to load scripts from unauthenticated sources” from third-party sources

I've got a website using third-party JavaScript scripts, from Google AdSense (to show ads), Google Analytics (to track visits), Google Maps (to show maps) or Facebook (to allow users leave comments). ...
3
votes
2answers
780 views

https://example.com and https://www.example.com: Should I use one or two SSL certificates?

I am in the process of enabling HTTPS on my web sites. I have a web site, let's call it example.com, which is available both with and without a www. prefix. I can now: request one SSL certificate ...
1
vote
2answers
388 views

Link to External Sites as HTTP or HTTPS?

While migrating from HTTP to HTTPS, I am recreating all internal links and canonicals as HTTPS, but it is not clear what to do for external links. Some links point to sites that support both ...
3
votes
2answers
1k views

How bad is it for SEO to use at 302 redirection instead of 301 redirection for HTTPS?

Recently my client has configured HTTPS. I recommended that he implement 301 redirection to 200. His developer could not do that and it is still using 302 redirects. How bad it can affect a website ...
7
votes
3answers
615 views

How do I remove HTTPS results from Google after the domain has been redirected and the SSL certificate taken down?

I need to remove HTTPS results from Google search rankings for the domain A that has been redirected to another domain B. So domain A does not have any pages on it at the moment and it will not have ...
4
votes
2answers
4k views

Will HTTP hyperlinks on HTTPS pages trigger mixed content warnings?

I am about switch to HTTPS for a site with about 1000 pages. All external libraries for the theme are secure and all internal ones will be changed over via 301 redirects. What about anchor links ...
10
votes
2answers
2k views

Is incorrect to have the HTTPS version of the sitemaps.org URL in the xmlns sitemap schema?

I have the schema with this: <sitemapindex xmlns="https://www.sitemaps.org/schemas/sitemap/0.9"> Is it correct or should be: <sitemapindex xmlns="http://www.sitemaps.org/schemas/sitemap/0....
2
votes
2answers
63 views

When legacy applications don't support HTTP, can we run both HTTP and HTTPS for SEO?

We have SSL on our site, however we have some legacy applications that do not support SSL, what to do in this case? In order for them to work correctly will I have to leave HTTP and HTTPS active? ...
1
vote
0answers
298 views

Correct way to redirect from HTTP domain to a different HTTPS domain on the same server?

Hello I have two different domain names pointing to the same server (same IP in DNS records). One domain (example1.com) has SSL enabled and has a fully working website on it. The other domain's (...
1
vote
2answers
262 views

COMODO SSL Analyzer Error -14

I have a hard time understanding Comodo's SSL Analyser error in some cases. If queried on smtp.tiscali.it:465,it returns the image below: However, if querying in OpenSSL: Or Digicert: It seems ...
2
votes
1answer
40 views

Asked to authenticated WebDav twice when connecting to HTTPS

I'm having the problem of double authentification on my Apache server like he has: Properly Force SSL with .htaccess But I want to do this via the conf files. He says he knows how to do it via conf ...
2
votes
1answer
87 views

How can I force Blogger's 'search widget' to use HTTPS?

I've just set up CloudFlare for my website, so that I can run HTTPS (yes, I know it's not encrypted end-to-end... this is fine). All the images, script resources, etc. are now linked using protocol-...
3
votes
3answers
314 views

Getting a “Potentially unsafe content” error on my WordPress site in MS Edge Browser

Some users have reported this error generated by Windows Defender SmartScreen in the MS Edge browser. No problems in the other browsers. Here's a screenshot of the error: It's been reported by ...
1
vote
3answers
94 views

When converting a WordPress site from HTTP to HTTPS, do all hard-coded HTTP references need to be updated?

We have a Wordpress HTTP site which we wish to convert to HTTPS or SSL. Do we have to find all mentions of hard coded HTTP resources or can we simply do a 301 redirect in .htaccess, and how do we do ...
2
votes
2answers
903 views

Redirect to WWW with HTTPS optimization

I want to redirect all my website pages to https and www. In order to do that I'm using the rules below and it's working fine. # Rewrite to WWW with HTTPS RewriteCond %{HTTPS} off # First rewrite to ...
3
votes
1answer
1k views

htaccess 301 to redirect .com to .co.uk, http to https and non-www to www subdomain

I have example.co.uk and example.com domain names. The main website is example.co.uk. I have an SSL certificate on the domain example.co.uk. I want the .htaccess file to 301 redirect everything ...
2
votes
2answers
66 views

http2 and Alternate-Protocol, ngnix open src web server config

My goal is to know if my android app and my browser are talking to my web server on http2. Using open source nginx stable 1.12 on linux. Looking at the network or other tools of firefix (version 54) ...
1
vote
1answer
959 views

So is Cloudflare now setting up HTTPS for websites? [closed]

Hi so I read many websites that say to enable SSL on my drupal site, I need to purchase the certificate, install it on my apache server, install mod_ssl, enable it on httpd.conf, and finally configure ...
2
votes
0answers
333 views

Cannot “fetch as Google” in Search Console after implementing HTTPS because of redirect

We have recently switched from HTTP to HTTPS. When I tried to "fetch as Google", it says the URL has been redirected and I am not able to see how the website is going to look. Is it because Google ...
2
votes
1answer
375 views

HTML and SEO - Relative Links and Absolute Links [duplicate]

Question: Does it matter if some links are full URL: ie: http://example.com/contact-us.html (absolute) versus relative (example.com/contact-us.html) for SEO purposes? The difference is when using ...
1
vote
1answer
1k views

.htaccess doesn't redirect my pages from HTTP to HTTPS

It seems like .htaccess doesn't redirect my pages from http to https. My domain is redirected to https but not my pages… Can it be a bad configuration from my web host? Here is what I have done ...
0
votes
1answer
915 views

How to implement HTTPS redirection for static resources such as robots.txt in legacy ASP.NET website?

We switched to HTTPS in our legacy ASP.NET site about a month ago. We had already implemented redirection with HTTP status code 301 'Moved permanently' for outdated aspx resources in the app's Global....
2
votes
1answer
7k views

Disable TLS1.0 and TLS 1.1 through cPanel

I am using Apache and i have access of cPanel. I want to disable TLS1.0. I have no idea how to do this. Can this done via cPanel? Is there is any option how to do that? Where do I need to change ...
1
vote
1answer
142 views

htaccess force ssl

I need to force all traffic for all pages on example.com to https://www.example.com . After much googles, and hosting site help docs, the consensus (and what my hosting - BlueHost - docs say to do) ...
0
votes
1answer
1k views

How do I rollback the HTTPS only changes that certbot made to my Apache configuration?

I have a Web Server using certbot to issue certificates. When I issue certificates for a domain, cerbot changes the apache config files (original file + mydomain-le-ssl.conf) of my domain to use only ...
4
votes
2answers
3k views

What benefits are there to having both HTTP and HTTPS protocols indexed by Google?

Using HTTPS seems to be standard and more and more sites are making the switch and redirecting all users from HTTP to HTTPS. However I have come across some large sites that keep HTTP and HTTPS both ...
2
votes
0answers
674 views

Using AutoSSL/LetsEncrypt To Give Cert to SubDomain Pointing to Separate Server

Background I have a primary website hosted on a LAMP-based VPS, with WHM and cPanel. I've installed the Let's Encrypt cPanel plugin to use with AutoSSL, and that is working for the main site. ...
1
vote
1answer
61 views

With several sites on the same server and different rules for HTTP/HTTPS a non-secure site is getting redirected to a different secure one

I have an Apache server that will be serving up a few sites (all from the same IP address). Site A must be accessible via HTTP and HTTPS. Site B must only be accessible via HTTP - it cannot be ...
2
votes
1answer
536 views

After redirecting site to HTTPS Google Search Console index status dropping for HTTP but staying at 0 for HTTPS

I moved my HTTP site to HTTPS last month. Earlier I had a search console property for http://www.example.com. Now I created a new property for https://www.example.com (also created property for http:/...
4
votes
2answers
1k views

SSLCipherSuite settings not taking effect from Apache ssl.conf, only when duplicated in each virtual host

I have an odd issue. The SSLProtocol config is getting applied in my ssl.conf file but the SSLCipherSuite config is not. I have tested this by changing each option and running scan with Qualys SSL ...
0
votes
1answer
42 views

Website not showing files over secure connection (on subdomains)

I've got this website. I basically can't see pages on my subdomains with HTTPS, I can see them without HTTPS though; I've contacted both my SSL provider and my hosting provider both just recommended ...
1
vote
2answers
315 views

Google Search Console reports a drop in number of indexed pages after changing to HTTPS

After changing my website to HTTPS, the pages indexed in the Google Webmaster Tools/Search Console, have dropped 80%. Do I have to add my website again, this time with the HTTPS version?
3
votes
3answers
94 views

Should I make webpages default to HTTPS?

I finally decided to jump on the HTTPS bandwagon after discovering that C-Panel has an auto-HTTPS setting. But I think I've opened a can of worms; I've found myself dealing with a variety of problems. ...
4
votes
1answer
78 views

Google wants sites to use SSL, but complains when compression is turned off to prevent BREACH hacks

Google has let it be known that they want websites to move to SSL, and they will start making it more and more clear that HTTP sites are 'insecure'. But then using their PageSpeed tool, they will mark ...
2
votes
1answer
82 views

Is it a Good Practice to move a blog from HTTP to HTTPS?

I have an e-commerce that is on https://www.example.com/, and I have a blog on the same URL, and it is on http://www.example.com/myblog/. Now, according to Google's guidelines, they are giving more ...
0
votes
1answer
190 views

EZ Publish to WordPress migration

I´m about to migrate a EZ Publish website to WordPress and I have several questions about the process. Considerations: I cannot run WP on the same hosting as EZP so it´s currently being developed on ...
1
vote
1answer
3k views

How to hide/proxy port 8080 via HTTPS/443 with Apache? [duplicate]

I have a non-encrypted service running separate to apache on 8080. I'd like to hide it and redirect all traffic to it via SSL. I have successfully setup proxy/reverse proxy so all requests to www....
4
votes
1answer
3k views

Does changing from HTTPS to HTTP kill my backlinks?

I had only my main page changed to HTTP to test out if I want to change from HTTPS to HTTP. All my backlinks are to my HTTPS site. Will I lose all of my backlinks and have to start over when switching ...
0
votes
1answer
60 views

If i redirected my website from “HTTPS” to “HTTP”, will i still be getting a ranking boost?

Google announced that going HTTPS will give you a ranking boost. So i bought SSL certificate to boost my rank and redirected all "HTTP" to "HTTPS" from .htacess... then i realized that it's not ...
2
votes
1answer
308 views

Duplicated webpage (HTTP & HTTPS)

my webpage is duplicated because of the SSL certificate (http:// example.com and https:// example.com). I want to redirect from http to https. But I have two questions: If my webpage has several ...
2
votes
1answer
68 views

Is it normal for SSL certificates to be inaccurate for newly created subdomains on shared hosting?

We created a bunch of subdomains on our shared hosting account for testing and noted that: a) For the first few minutes of the subdomains life, the SSL certificate being served was for a completely ...
2
votes
1answer
105 views

Apache 2.4 - Disabled TLS 1.0, custom error page for clients?

With TLS 1.0 disabled this is causing some unneeded troubleshooting for some clients (clients being internal applications of various kinds, mostly case handling applications). By unneeded I mean that ...
3
votes
1answer
612 views

GitHub Page Custom Domain - www is redirected to https

I have a custom domain http://jstock.org mapped to my github page : http://yccheok.github.io I setup it using https://www.namecheap.com/support/knowledgebase/article.aspx/9645/2208/how-do-i-link-my-...
1
vote
1answer
109 views

Impressions rise, Google position declines?

I redesigned my one-page website lately and launched it before 2 weeks. I have had some negative volatility on Google and also my website declined which I somehow expected since I did not / couldn't ...
1
vote
1answer
74 views

SSL Protect Unlimited Sites Under a Single vHost Without Server Restarts

I am creating a platform similar in concept to Wix for hosting websites. I wish to ensure that all the sites (except where specific issues prevent this on a site by site basis) will be protected by ...