Questions tagged [https]

HTTPS is the secure version of the hypertext transfer protocol (HTTP). It usually uses port 443 and is powered by the TLS (formerly SSL) cryptographic protocol.

Filter by
Sorted by
Tagged with
5
votes
2answers
3k views

How can I serve all resources under HTTPS instead of HTTP without changing their URLs in the HTML code

I know that by using an .htaccess file I can redirect everyone to https://. However, my SSL certificate complains if all the content isn't served under HTTPS. Is there a way to convert all the ...
5
votes
1answer
4k views

Does an SSL Certificate actually require a dedicated IP?

My web host which I have been with for at least going on 8 years now is requiring a dedicated IP address, which is $3.33/Month now for assigning a SSL Certificate with my web hosting package and ...
5
votes
4answers
687 views

New Google SEO benefit with SSL - with only a few sections in SSL, or always on?

Google just announced that SSL will affect site ranking positively: http://googlewebmastercentral.blogspot.se/2014/08/https-as-ranking-signal.html I have an Easter Island tourist agency called Easter ...
5
votes
2answers
5k views

Performance: 4096 Bit RSA-Key compared to 2048 bit RSA-Key

Is there a comparison between 4096 Bit RSA-Key and a 2048 Bit RSA-Key? I'd like to know what impact on performance it has, if I'm choosing a 4096-Bit key for ssl-encryption. Is there any info which ...
5
votes
1answer
169 views

Schema links and HTTPS

In the process of moving to 100% HTTPS on a site, I performed a site-wide search for http:// in an effort to find potential problems. One common class of instances included schema links (certainly ...
5
votes
2answers
3k views

Using Google Webmaster Tools “change of address” feature for HTTP to HTTPS migration

I'm trying to use change of address in Google Webmaster Tools, and I've followed the instructions and set a 301 redirect for all requests to HTTPS. My site has always used HTTP with a 301 for no-www, ...
5
votes
2answers
1k views

Why would my site load slower after I switched to https?

I bought and implemented an SSL certificate on my website and it seems to load a lot slower than before. Why does this happen and how can it be fixed?
5
votes
1answer
859 views

Google's point of view to SSL - Do I need to force HTTPS protocol for all pages on website

Well now that google clearly declared that SSL would positively affect seo I want to know in which of the following conditions I fully benfit from ssl: 1.If I server https connection for all pages of ...
5
votes
1answer
927 views

“https://” refers to random site, “http://” is broken, but “http://www” works

I'm running a website which is acting extremely strange. At the time of writing, this link works: http://www.example.com This link doesn't: http://example.com But it does work if you copy/paste it ...
5
votes
2answers
530 views

Google suddenly only indexes https and not http

So all of a sudden, searches for our site "radiotuna" give out the result as an HTTPS link. https://www.google.com/?q=radiotuna#hl=en&safe=off&output=search&sclient=psy-ab&q=radiotuna&...
5
votes
1answer
1k views

Does MSIE recognise StartCom as an SSL Certificate Authority?

Ok, so I'm thinking about getting in on the SSL action, so that my sites can be secure etc, and after hours of shopping for the best priced certificate, I find out that StartSSL offer a free one. One ...
5
votes
1answer
2k views

WordPress HTTP to HTTPS without trailing slash results in double redirect

I have noticed that one of my WordPress powered sites is experiencing double redirects when a user or bot attempts to visit a URL without HTTPS and a trailing slash. In short: http://example.com/...
5
votes
3answers
390 views

SSL versus EV SSL

As I understand it, SSL certificates verify the connection between the host and the browser, preventing MITM attacks. Is it true that EV SSL verifies the host itself, thus preventing (in theory) ...
5
votes
1answer
2k views

Cloudflare not redirecting to HTTPS

I set it up, and set "Automatic HTTPS Rewrites" to "ON", BUT this still not redirecting me to the https by default when the page is requested via http... accessing the page manually by putting https ...
5
votes
1answer
173 views

Will not having https redirect from example.com to www.example.com affect SEO

I've recently set up SSL for a bunch of my domains using a Positive SSL Multi-domain certificate from NameCheap, my domain provider. In the past when I was using single domain certificates, they ...
5
votes
5answers
2k views

Do you need to disavow on [HTTPS SSL] after performing a disavow on [HTTP]

I have a client which disavowed a few thousand dirty links from his site profile back in February 2015. Recently the site was switch from HTTP to HTTPS (SSL enforced). Google recommends that you add ...
5
votes
2answers
679 views

What are the benefits of requiring HTTPS between AWS CloudFront and the origin server?

I am hosting a website on Amazon CloudFront and we've recently updated the distribution to require HTTPS between CloudFront and viewers. With the introduction of AWS Certificate Manager and the ...
5
votes
2answers
20k views

Redirect Permanent and https

I just set up HTTPS on my server, and I have an issue with redirect permanent. Example http://domain.com/index.html it redirect me to http://www.domain.comindex.html The / (tail ending slash) is ...
5
votes
3answers
5k views

Is it possible to share SSL certificates across servers?

We have a web application we will be launching soonish and for right now we just have one SSL/HTTPS certificate. We have this one certificate shared across 3 servers(in a cluster for load balancing) ...
5
votes
1answer
97 views

Preserving social metrics when switching to https

I am switching all my sites to https this week and am running into an issue. We use AddThis for our sharing widgets and according to their support all our social metrics will be reset to zero once the ...
5
votes
2answers
508 views

Properly redirect a site to WWW and HTTPS

I recently found out a problem in .htaccess file in my website. When I started the site I did a 301 redirect to redirect all non-www and http request to www with https. I added this lines of code and ...
5
votes
1answer
6k views

How to switch to https in webmaster tools?

We will be trying to add SSL to our website pretty soon , in the demo server we achieve everything perfect, the thing now is not to loose the traffic. With Google Analytics we are able to change ...
5
votes
2answers
919 views

For an international domain name with non-ASCII characters, what goes into the CSR's CN field?

Suppose I control the international domain name (IDN) münchen.example.com (xn--mnchen-3ya.example.com). Now, I want to get a SSL certificate for this domain name to enable HTTPS for my web site. I ...
5
votes
1answer
393 views

Does Google crawl and index AJAX on HTTPS sites?

We made transitioned out website to HTTPS. We also now use nearly AJAX to load almost all the content. Therefore all URLs of existing pages have changed. We used 301 redirects as recommended and we ...
5
votes
2answers
2k views

301 Redirect Causes Insecure Connection Warning

My client's primary domain name is a variant of a commonly spelled name, for example domein.com. To avoid losing traffic, they also purchased domain.com. The live site is at https://domein.com. When I ...
5
votes
1answer
499 views

Nginx and Google Appengine Reverse Proxy Security

The scenario is that I have a Google compute node running Nginx as a reverse proxy to the google appengine. The appengine is used to service REST calls from an single page application (SPA). HTTPS ...
5
votes
2answers
14k views

Free HTTPS hosting with PHP support [duplicate]

Possible Duplicate: How to find web hosting that meets my requirements? I'm looking for free hosting with HTTPS and PHP support. Of course a subdomain is enough. Something like Google's appspot....
5
votes
3answers
118 views

What is SSL Hosting and what are the requirements for making secure transaction

I am here in order to collect the information for making secure online transaction. My client has got a online shopping site. We are now having cart in our own site and transfering the cart detail to ...
4
votes
2answers
1k views

The same user from different IP-addresses?

Has anybody encountered the situation when the same user from the same session ID and the same browser requested 2 different scripts on the same webserver inside the duration of 30 sec from two ...
4
votes
2answers
4k views

Will HTTP hyperlinks on HTTPS pages trigger mixed content warnings?

I am about switch to HTTPS for a site with about 1000 pages. All external libraries for the theme are secure and all internal ones will be changed over via 301 redirects. What about anchor links ...
4
votes
4answers
2k views

SSL and green address bar

I am new to SSL so can someone explain why my address bar turns green when I'm on certain sites beginning with https:// and sometimes it doesn't even though I know the site has SSL? Maybe these two ...
4
votes
2answers
148 views

EV SSL with a static resource server

We have the domain: www.scirra.com Which we are going through the process of obtaining an EV SSL certificate for. The site makes use of our static domain to server CSS/images etc. It has 4 ...
4
votes
2answers
4k views

Apache Rewrite Rule non-www to www + http to https + remove trailing slash

I would like to accomplish the following: rewrite non-www to www redirect from http to https remove trailing slash e.g. http://example.co.uk should redirect to https://www.example.co.uk How would ...
4
votes
2answers
2k views

Should I fix HTTPS mixed content for SEO reasons?

I have a website that is only available via https, but 3rd party images are only available via http. This results in a HTTPS mixed content warning. I'm thinking of proxying the image serving via an ...
4
votes
2answers
561 views

How to use the private and public keys?

I am new to ssl certificates, i wanted to learn about ssl certificates, and I generated private and public keys myself while logged into cpanel, I wonder how to use those and generate a secured ...
4
votes
1answer
117 views

What makes a SSL certificate “signed”?

When you buy a SSL certificate from Comodo, it is signed by Comodo and therefore trusted. How is it signed though? Why can't anyone sign the certificate pretending to be Comodo?
4
votes
2answers
10k views

Changing sitemap.xml and robots.txt after moving from http to https

I am migrating a website from http to https entirely, all http urls will have 301 redirects to their https counterparts. From https://support.google.com/webmasters/answer/6033049 We reference our ...
4
votes
1answer
180 views

Should I force secure access to my web sites?

Now that Let's Encrypt is in public beta, I'm adding secure browsing to many of my web sites. But should I force secure access, or allow visitors to choose how they access those sites? In researching ...
4
votes
3answers
2k views

Googlebot robots.txt access error on HTTPS when redirected from HTTP

This might be a stupid question, but I never came across this issue before and were not able to find any definite answers to this on the web: Our client migrated to HTTPS a few months ago, using ...
4
votes
2answers
4k views

How to force ssl and www for a subdomain as an independent domain?

I have own the example.tld . I want to force SSL and https for root-domain and all of its subdomains. I have used below code in .htaccess file of root-domain: RewriteEngine On RewriteCond %{HTTPS} ...
4
votes
1answer
950 views

Is a PHP POST using cURL from HTTPS site to HTTP endpoint encrypted securely?

I have a website residing on a domain with a valid SSL certificate that is fully using HTTPS. If I take form data from this site that is secured with an SSL and send it to a non-secure HTTP endpoint ...
4
votes
2answers
3k views

What benefits are there to having both HTTP and HTTPS protocols indexed by Google?

Using HTTPS seems to be standard and more and more sites are making the switch and redirecting all users from HTTP to HTTPS. However I have come across some large sites that keep HTTP and HTTPS both ...
4
votes
1answer
3k views

Does changing from HTTPS to HTTP kill my backlinks?

I had only my main page changed to HTTP to test out if I want to change from HTTPS to HTTP. All my backlinks are to my HTTPS site. Will I lose all of my backlinks and have to start over when switching ...
4
votes
1answer
10k views

What steps are required to enable SSL on Apache2 with Ubuntu?

I am developing a strategy game for web where there there will be a lot of client-server traffic for sending attacks, moves, etc. Right now I send messages from the client to the server via HTTP, and ...
4
votes
1answer
1k views

Which is more supported by web clients (browsers): SAN (Subject Alternative Name) or Wildcard SSL Certificates?

Which are more widely supported by browser clients, wildcard or SAN certificates? I need to decide between using a SAN cert or a wildcard cert. Client/browser compatibility is my biggest concern.
4
votes
1answer
152 views

SSL enforced but receiving some parts of the site are not using SSL warning

I had been trying to enforce SSL for my site but although the SSL certificate is signed properly by networksolutions, each time the pages are loaded it still displays an SSl warning in browser warning:...
4
votes
2answers
111 views

Least SEO-disruptive HTTPS migration strategy

We are moving a website from HTTP to HTTPS and I have read Google's support article which is quite good: https://support.google.com/webmasters/answer/6033049 As I understand, 301 redirects may ...
4
votes
1answer
205 views

what cipher suites should I consider on government website

I maintain a website for the government, which is http only. The target audience is all civilian, so the browser client may be very old down to IE6. Recently they request to upgrade the site to https....
4
votes
2answers
2k views

Schema.org itemtype identifier - Should it use relative urls or https links?

In the age of SSL everywhere there are still major sites that lack it. Schema.org for example allows HTTPS but resolves naturally to HTTP. Seems like it would make sense to call upon the HTTPS ...
4
votes
2answers
214 views

Will using HTTPS hurt my site's SEO or other statistics?

I've set up a WordPress blog. Since I have to log into it from many different locations/machines, I've also got an SSL certificate, and set up Apache to redirect HTTP to HTTPS. It all works, but I'm ...