Questions tagged [https]

HTTPS is the secure version of the hypertext transfer protocol (HTTP). It usually uses port 443 and is powered by the TLS (formerly SSL) cryptographic protocol.

Filter by
Sorted by
Tagged with
6
votes
2answers
212 views

Switching to HTTPS - redirect question

Following the recent Google announcements about improved ranking for sites running on https we have a number of clients asking about this. Is it safe to just 301 redirect all pages to their SSL ...
5
votes
2answers
12k views

Do I need a certificate to redirect via CNAME?

I have abc.example.com that is being shut down and all data was sent via SSL. I have xyz.example.com already live and pure SSL site. I am changing record (CNAME) for abc.example.com to point to xyz....
5
votes
3answers
2k views

EV SSL Certificates - does anyone care? [closed]

Is any one aware of any data or studies from an impartial source that show the impact of EV SSL certificates on customer behavior? I've been unable to find any such studies. If an EV SSL certificate ...
5
votes
2answers
3k views

How can I serve all resources under HTTPS instead of HTTP without changing their URLs in the HTML code

I know that by using an .htaccess file I can redirect everyone to https://. However, my SSL certificate complains if all the content isn't served under HTTPS. Is there a way to convert all the ...
5
votes
1answer
4k views

Does an SSL Certificate actually require a dedicated IP?

My web host which I have been with for at least going on 8 years now is requiring a dedicated IP address, which is $3.33/Month now for assigning a SSL Certificate with my web hosting package and ...
5
votes
4answers
694 views

New Google SEO benefit with SSL - with only a few sections in SSL, or always on?

Google just announced that SSL will affect site ranking positively: http://googlewebmastercentral.blogspot.se/2014/08/https-as-ranking-signal.html I have an Easter Island tourist agency called Easter ...
5
votes
1answer
178 views

Schema links and HTTPS

In the process of moving to 100% HTTPS on a site, I performed a site-wide search for http:// in an effort to find potential problems. One common class of instances included schema links (certainly ...
5
votes
2answers
3k views

Using Google Webmaster Tools “change of address” feature for HTTP to HTTPS migration

I'm trying to use change of address in Google Webmaster Tools, and I've followed the instructions and set a 301 redirect for all requests to HTTPS. My site has always used HTTP with a 301 for no-www, ...
5
votes
2answers
565 views

How to use the private and public keys?

I am new to ssl certificates, i wanted to learn about ssl certificates, and I generated private and public keys myself while logged into cpanel, I wonder how to use those and generate a secured ...
5
votes
2answers
2k views

Why would my site load slower after I switched to https?

I bought and implemented an SSL certificate on my website and it seems to load a lot slower than before. Why does this happen and how can it be fixed?
5
votes
1answer
869 views

Google's point of view to SSL - Do I need to force HTTPS protocol for all pages on website

Well now that google clearly declared that SSL would positively affect seo I want to know in which of the following conditions I fully benfit from ssl: 1.If I server https connection for all pages of ...
5
votes
1answer
12k views

What steps are required to enable SSL on Apache2 with Ubuntu?

I am developing a strategy game for web where there there will be a lot of client-server traffic for sending attacks, moves, etc. Right now I send messages from the client to the server via HTTP, and ...
5
votes
1answer
1k views

“https://” refers to random site, “http://” is broken, but “http://www” works

I'm running a website which is acting extremely strange. At the time of writing, this link works: http://www.example.com This link doesn't: http://example.com But it does work if you copy/paste it ...
5
votes
2answers
532 views

Google suddenly only indexes https and not http

So all of a sudden, searches for our site "radiotuna" give out the result as an HTTPS link. https://www.google.com/?q=radiotuna#hl=en&safe=off&output=search&sclient=psy-ab&q=radiotuna&...
5
votes
1answer
1k views

Does MSIE recognise StartCom as an SSL Certificate Authority?

Ok, so I'm thinking about getting in on the SSL action, so that my sites can be secure etc, and after hours of shopping for the best priced certificate, I find out that StartSSL offer a free one. One ...
5
votes
1answer
2k views

WordPress HTTP to HTTPS without trailing slash results in double redirect

I have noticed that one of my WordPress powered sites is experiencing double redirects when a user or bot attempts to visit a URL without HTTPS and a trailing slash. In short: http://example.com/...
5
votes
3answers
394 views

SSL versus EV SSL

As I understand it, SSL certificates verify the connection between the host and the browser, preventing MITM attacks. Is it true that EV SSL verifies the host itself, thus preventing (in theory) ...
5
votes
1answer
2k views

421 Misdirected Request on Shared Host

I am on a shared host (Apache) and am receiving little help resolving this issue. I have a main domain https://www.waldorfteacherresources.com and I have set up two cookieless domains: static....
5
votes
1answer
2k views

Cloudflare not redirecting to HTTPS

I set it up, and set "Automatic HTTPS Rewrites" to "ON", BUT this still not redirecting me to the https by default when the page is requested via http... accessing the page manually by putting https ...
5
votes
3answers
2k views

SSLCipherSuite settings not taking effect from Apache ssl.conf, only when duplicated in each virtual host

I have an odd issue. The SSLProtocol config is getting applied in my ssl.conf file but the SSLCipherSuite config is not. I have tested this by changing each option and running scan with Qualys SSL ...
5
votes
1answer
185 views

Will not having https redirect from example.com to www.example.com affect SEO

I've recently set up SSL for a bunch of my domains using a Positive SSL Multi-domain certificate from NameCheap, my domain provider. In the past when I was using single domain certificates, they ...
5
votes
5answers
2k views

Do you need to disavow on [HTTPS SSL] after performing a disavow on [HTTP]

I have a client which disavowed a few thousand dirty links from his site profile back in February 2015. Recently the site was switch from HTTP to HTTPS (SSL enforced). Google recommends that you add ...
5
votes
2answers
20k views

Redirect Permanent and https

I just set up HTTPS on my server, and I have an issue with redirect permanent. Example http://domain.com/index.html it redirect me to http://www.domain.comindex.html The / (tail ending slash) is ...
5
votes
3answers
6k views

Is it possible to share SSL certificates across servers?

We have a web application we will be launching soonish and for right now we just have one SSL/HTTPS certificate. We have this one certificate shared across 3 servers(in a cluster for load balancing) ...
5
votes
1answer
98 views

Preserving social metrics when switching to https

I am switching all my sites to https this week and am running into an issue. We use AddThis for our sharing widgets and according to their support all our social metrics will be reset to zero once the ...
5
votes
2answers
571 views

Properly redirect a site to WWW and HTTPS

I recently found out a problem in .htaccess file in my website. When I started the site I did a 301 redirect to redirect all non-www and http request to www with https. I added this lines of code and ...
5
votes
1answer
7k views

How to switch to https in webmaster tools?

We will be trying to add SSL to our website pretty soon , in the demo server we achieve everything perfect, the thing now is not to loose the traffic. With Google Analytics we are able to change ...
5
votes
2answers
1k views

For an international domain name with non-ASCII characters, what goes into the CSR's CN field?

Suppose I control the international domain name (IDN) münchen.example.com (xn--mnchen-3ya.example.com). Now, I want to get a SSL certificate for this domain name to enable HTTPS for my web site. I ...
5
votes
1answer
396 views

Does Google crawl and index AJAX on HTTPS sites?

We made transitioned out website to HTTPS. We also now use nearly AJAX to load almost all the content. Therefore all URLs of existing pages have changed. We used 301 redirects as recommended and we ...
5
votes
2answers
3k views

301 Redirect Causes Insecure Connection Warning

My client's primary domain name is a variant of a commonly spelled name, for example domein.com. To avoid losing traffic, they also purchased domain.com. The live site is at https://domein.com. When I ...
5
votes
1answer
507 views

Nginx and Google Appengine Reverse Proxy Security

The scenario is that I have a Google compute node running Nginx as a reverse proxy to the google appengine. The appengine is used to service REST calls from an single page application (SPA). HTTPS ...
5
votes
2answers
14k views

Free HTTPS hosting with PHP support [duplicate]

Possible Duplicate: How to find web hosting that meets my requirements? I'm looking for free hosting with HTTPS and PHP support. Of course a subdomain is enough. Something like Google's appspot....
5
votes
3answers
118 views

What is SSL Hosting and what are the requirements for making secure transaction

I am here in order to collect the information for making secure online transaction. My client has got a online shopping site. We are now having cart in our own site and transfering the cart detail to ...
4
votes
2answers
1k views

The same user from different IP-addresses?

Has anybody encountered the situation when the same user from the same session ID and the same browser requested 2 different scripts on the same webserver inside the duration of 30 sec from two ...
4
votes
2answers
5k views

Will HTTP hyperlinks on HTTPS pages trigger mixed content warnings?

I am about switch to HTTPS for a site with about 1000 pages. All external libraries for the theme are secure and all internal ones will be changed over via 301 redirects. What about anchor links ...
4
votes
3answers
5k views

HTTPS and HTTP URLs point to different places?

I own and use a domain for a project. When I type in my domain preceeded by HTTPS instead of HTTP, I am re-directed to a compromising website. How is this possible? Did somebody buy the HTTPS ...
4
votes
4answers
2k views

SSL and green address bar

I am new to SSL so can someone explain why my address bar turns green when I'm on certain sites beginning with https:// and sometimes it doesn't even though I know the site has SSL? Maybe these two ...
4
votes
2answers
150 views

EV SSL with a static resource server

We have the domain: www.scirra.com Which we are going through the process of obtaining an EV SSL certificate for. The site makes use of our static domain to server CSS/images etc. It has 4 ...
4
votes
2answers
4k views

Apache Rewrite Rule non-www to www + http to https + remove trailing slash

I would like to accomplish the following: rewrite non-www to www redirect from http to https remove trailing slash e.g. http://example.co.uk should redirect to https://www.example.co.uk How would ...
4
votes
2answers
2k views

Should I fix HTTPS mixed content for SEO reasons?

I have a website that is only available via https, but 3rd party images are only available via http. This results in a HTTPS mixed content warning. I'm thinking of proxying the image serving via an ...
4
votes
1answer
118 views

What makes a SSL certificate “signed”?

When you buy a SSL certificate from Comodo, it is signed by Comodo and therefore trusted. How is it signed though? Why can't anyone sign the certificate pretending to be Comodo?
4
votes
2answers
11k views

Changing sitemap.xml and robots.txt after moving from http to https

I am migrating a website from http to https entirely, all http urls will have 301 redirects to their https counterparts. From https://support.google.com/webmasters/answer/6033049 We reference our ...
4
votes
1answer
182 views

Should I force secure access to my web sites?

Now that Let's Encrypt is in public beta, I'm adding secure browsing to many of my web sites. But should I force secure access, or allow visitors to choose how they access those sites? In researching ...
4
votes
3answers
2k views

Googlebot robots.txt access error on HTTPS when redirected from HTTP

This might be a stupid question, but I never came across this issue before and were not able to find any definite answers to this on the web: Our client migrated to HTTPS a few months ago, using ...
4
votes
2answers
6k views

How to force ssl and www for a subdomain as an independent domain?

I have own the example.tld . I want to force SSL and https for root-domain and all of its subdomains. I have used below code in .htaccess file of root-domain: RewriteEngine On RewriteCond %{HTTPS} ...
4
votes
1answer
1k views

Is a PHP POST using cURL from HTTPS site to HTTP endpoint encrypted securely?

I have a website residing on a domain with a valid SSL certificate that is fully using HTTPS. If I take form data from this site that is secured with an SSL and send it to a non-secure HTTP endpoint ...
4
votes
2answers
3k views

What benefits are there to having both HTTP and HTTPS protocols indexed by Google?

Using HTTPS seems to be standard and more and more sites are making the switch and redirecting all users from HTTP to HTTPS. However I have come across some large sites that keep HTTP and HTTPS both ...
4
votes
1answer
3k views

Does changing from HTTPS to HTTP kill my backlinks?

I had only my main page changed to HTTP to test out if I want to change from HTTPS to HTTP. All my backlinks are to my HTTPS site. Will I lose all of my backlinks and have to start over when switching ...
4
votes
1answer
1k views

Which is more supported by web clients (browsers): SAN (Subject Alternative Name) or Wildcard SSL Certificates?

Which are more widely supported by browser clients, wildcard or SAN certificates? I need to decide between using a SAN cert or a wildcard cert. Client/browser compatibility is my biggest concern.
4
votes
1answer
152 views

SSL enforced but receiving some parts of the site are not using SSL warning

I had been trying to enforce SSL for my site but although the SSL certificate is signed properly by networksolutions, each time the pages are loaded it still displays an SSl warning in browser warning:...

1 2
3
4 5
18