Questions tagged [https]

HTTPS is the secure version of the hypertext transfer protocol (HTTP). It usually uses port 443 and is powered by the TLS (formerly SSL) cryptographic protocol.

Filter by
Sorted by
Tagged with
4
votes
2answers
214 views

Will using HTTPS hurt my site's SEO or other statistics?

I've set up a WordPress blog. Since I have to log into it from many different locations/machines, I've also got an SSL certificate, and set up Apache to redirect HTTP to HTTPS. It all works, but I'm ...
4
votes
2answers
614 views

Is it good practice for a https site to link to a https url that redirects to http?

Several SEO analysis sites warn against linking to http site from a https site. If I link to https site that redirects to http, does that still violate that rule?
4
votes
2answers
117 views

Does https site conversion affects organic traffic?

Our site has lost substantial traffic after moving to HTTPS. Most of our Posts which were on first page are on 5-6th page now! We started around 1st Dec and it is continuously dropping since then. ...
4
votes
2answers
4k views

How to set preferred domain with https in Google Webmaster Tools

I have registered a website and bought an SSL certificate, installed it and did some mod_rewrite rules to have all my traffic go to https://example.com. So all is working nicely from that perspective. ...
4
votes
2answers
14k views

htaccess force HTTPS except one page

This is my current .htaccess file: RewriteEngine On ErrorDocument 404 /404.html # 1 RewriteRule ^extra/([0-9]+)/(.*).html?$ pages.php?do=view&id=$1 RewriteRule ^special-bonus/([0-9]+)/(.*).html?$ ...
4
votes
1answer
2k views

HTTP/HTTPS duplicate content 301 vs canonical

I thought I would ask a question as the amount of different sources that say this is right or that isn't right is unbelievable. Let me tell you my situation, at the moment, my boss wanted me to add ...
4
votes
1answer
428 views

2048 bit SSL overhead [closed]

Can you guys help me learn some ssl networking basics plz? What is a SSL transaction (a full handshake?) Why do people think 2k ssl will melt netscalers (ssl trans/sec exceed netscaler max ssl trans/...
4
votes
2answers
2k views

running multiple name-based web applications on a single ip address with SSL

I'm working on web projects. My scenario is I have two web applications running on one single web server (Apache). Due to my company policy, they ask me to put both of them on SSL (Port #443), no ...
4
votes
4answers
3k views

Firefox reports HTTPS page to contain non-secure elements

When I visit our web site pages with IE over HTTPS, it reports the web site as protected (i.e. no elements are taken using HTTP). The same page, when loaded to Firefox, causes Firefox to complain that ...
4
votes
3answers
2k views

SSLCipherSuite settings not taking effect from Apache ssl.conf, only when duplicated in each virtual host

I have an odd issue. The SSLProtocol config is getting applied in my ssl.conf file but the SSLCipherSuite config is not. I have tested this by changing each option and running scan with Qualys SSL ...
4
votes
1answer
158 views

Are Commercial SSL Certificates (key file, and certificate file) portable when migrating between a new and old Apache2 server?

We have an SSL Certificate that's currently on our Apache2 server for transferring traffic over the https protocol. We are migrating away from this server to at another data center with a different ...
4
votes
2answers
410 views

Migrating SSL cert to new server

We are moving from an OSCommerce website to a Magento website on a different server but with the exact same domain name. The OSCommerce site has a SHA-1 SSL cert with goDaddy which I will change to a ...
4
votes
2answers
5k views

Mixed content - SSL Problem or Opencart?

This question is related with: Duplicated content www on subdomain and SSL My actual HTACCESS: RewriteBase / # this redirects example.com and www.example.com to https - thanks closetnoc @webmasters-...
4
votes
1answer
87 views

How to let users know that the site is available over HTTPS?

My websites are now available over HTTPS, but I don't want to make that the default at this point: My canonical URLs are still HTTP and I'm not ready to make the SEO switch My certificates are SNI ...
4
votes
2answers
24k views

Wild card redirection for HTTPS and Non-www version

I want to enable SSL for my main website and sub-domain websites. For SEO reasons, I need to redirect HTTP requests to HTTPS requests. I think I should do that using a wild card redirect in my ....
4
votes
1answer
1k views

Use SSL on Heroku without paying Heroku for SSL?

In this post, the author suggest a way to get SSL on Heroku without paying Heroku for it: Pay Cloudflare for premium service, and get SSL support with it. Create a CNAME in cloudflare that points to ...
4
votes
1answer
55 views

HTTPS Causes Broken Back Links?

If I change my URL to force https does this effect all of my backlinks to be broken and to be lost one by one? And if so if I change it back will it will this restore the back links on the site? Any ...
4
votes
3answers
8k views

DNS configuration to force root domain to www

we have an app running on heroku. the dns setup is like this: A record for domain.com -> heroku front end ip addresses CNAME for www.domain.com -> specific host name for our app provided by heroku ...
4
votes
1answer
3k views

How can mixed content compromise an entire HTTPS session?

Google Chrome is probably one of the stricter browsers out there in terms of highlighting SSL errors. Most browsers will point out when you are viewing an HTTPS page which loads insecure images/...
4
votes
3answers
4k views

Session cookie being dropped when moving under the SSL

The short version: I've got a session cookie being set on a dev site but it's not being picked up when I move to the SSL (so the shopping cart empties when you go to the checkout). When it's set on ...
4
votes
1answer
56 views

How would you implement redirects for domain canonicalization, no-www, and HTTPS for IIS 7.5

For the moment I'm stuck with an IIS-server, unfortunately not my best subject (I'm much better w. Apache). We have a site on a Win 2008 R2 Server with IIS 7.5. It's an old site and we are working on ...
4
votes
2answers
167 views

Will my Facebook comments get lost under these scenarios?

I want to integrate Facebook comments to my blog. According to my research, the page is treated as an object. So all the comments are tied to this object. This object itself is the page URL. Now I ...
4
votes
1answer
78 views

Google wants sites to use SSL, but complains when compression is turned off to prevent BREACH hacks

Google has let it be known that they want websites to move to SSL, and they will start making it more and more clear that HTTP sites are 'insecure'. But then using their PageSpeed tool, they will mark ...
4
votes
1answer
539 views

Wix sitemap for http and https

I have a website hosted in Wix and as you may know it automatically keeps a sitemap there (sitemap.xml). Now that I activated https to my site, I read I should add another property on Google Search ...
4
votes
1answer
5k views

How to redirect HTTPS to HTTP behind proxy (CloudFlare)

I want to redirect HTTPs to HTTP, I tried following code in .htaccess file Options +FollowSymlinks RewriteEngine on RewriteCond %{SERVER_PORT} ^443$ RewriteRule ^(.*)$ http://www.yourdomain.com/$1 [R=...
4
votes
1answer
430 views

Best practices for adding SSL and preserving backlinks

If I have many backlinks that points to http://example.com and then enforce SSL so that the URL then becomes https://example.com, What should I do to ensure that I do not lose these backlinks? One ...
4
votes
2answers
1k views

How to use HTTPS canonical link tag in Blogger blog?

Look out, Google official security blog - http://googleonlinesecurity.blogspot.com Above blog forced user to visit https link (without using any kind of JS), but normal Blogger blog serve both ...
4
votes
2answers
2k views

Google Analytics HTTP vs HTTPS

I want to use Google Analytics on a website that uses both HTTP and HTTPS that works as explained below: Secure pages accessed through https://mydomain.com/secure/* are always on HTTPS. Any access to ...
4
votes
1answer
160 views

SSL: What are the differences between Domain Validation and Extended Validation Certificates?

I can get Extended Validation for cheaper than Domain Validation, yearly. What are the differences between them?
4
votes
2answers
1k views

Redirect non-www to www while preserving protocol

I am aware of the fact that there are tons of questions in this section and in server fault dealing with re-directions from non-www to www URLs. But I couldn't find one dealing with this issue while ...
4
votes
2answers
842 views

Impact of migrating home page from HTTP to HTTPS on search results

I've had to change one of my site's home page to HTTPS from HTTP. I had plenty of links coming into the HTTP page and was performing well in Google against many of my targeted search phrases. I did a ...
4
votes
1answer
768 views

How to add force https to htaccess file RewriteRule with _route_=$1

I inherited support for an Opencart 1.5 site which needs to have SSL enabled. I've edited the config.php files in / and admin/ and adding https:// to the URL is working in the browser and links are ...
4
votes
2answers
235 views

HTTPS for website without form and login

I would like to know if it is necessary, to avoid Google penalties and chrome warnings, by enabled HTTPS on a website that does not have a login page or a form. In some cases the website can have a ...
4
votes
1answer
40 views

HTTPS implementation. Should I change pre-head tags?

I implemented HTTPS on all the webpages of my website. My browser tells me it's a "Secure connection" with a green signal. I double-checked that all the images, CSS files, JS files, etc. were HTTPS, ...
4
votes
1answer
1k views

Google warning about SSL/TLS certificate

I received this warning from Google Webmaster Tools. I have SSL for www and non-www but they are in different SANS. Would that cause a problem? SSL/TLS certificate does not include domain name ...
4
votes
2answers
3k views

Facebook likes reset after moving to HTTPS

I've got a question regarding the Facebook like button. We worked on a piece recently that embeds a number of social share buttons (please see the source code below). When the piece was released, it ...
4
votes
2answers
710 views

Serving WordPress menu links in only HTTPS or HTTP depending on how it's accessed

I have a WordPress site which uses WordPress HTTPS to enable SSL when users access it via that protocol. However, currently the menu links point back to the HTTP version. I want users to be linked ...
4
votes
1answer
117 views

How to determine the sequence of ordering certificates by browser?

I did a Mutual Certificate Authentication implementation with OpenSSL and Apache Web Server on CentOS platform. To simple explanation see this diagram: ---------- | ...
4
votes
1answer
2k views

How to track HTTP and HTTPS from the same Google Analytics account?

I have a website with tutorials and a discuss forum. The website load on http protocol and the forum load with https for security reasons. For both of them I run the default Google Analytics code, but ...
4
votes
0answers
50 views

Redirecting www and non www to HTTPS on blogger

I have a blog on Blogger and have activated HTTPS. This link works: https://www.example.com But this does not: https://example.com/ Is there a solution to this problem?
4
votes
1answer
494 views

When does SSL handshake happen in real world

I am about to setup an SSL certificate for my site. The system asked me if I want a 2048 or 4096 bit key. I've read enough about the key strength and increased latency/handshake time as well as server ...
3
votes
3answers
172 views

Switching domain from HTTPS to HTTP

I recently launched a new site on an existing domain, using new hosting. The previous site utilized HTTPS, the new site does not (just HTTP). The problem I ran into is that Google currently has the ...
3
votes
2answers
381 views

Will canonical tag referencing unsecure HTTP URLs on a HTTPS page cause the unsecure message?

If a secure HTTPS page has a canonical tag referencing the HTTP version, will this cause the message in the browser that the page is using unsecure elements and prevent the green lock icon appearing? ...
3
votes
3answers
1k views

HTTP to HTTPS: Wait for new sitemap to be indexed?

Running HTTP and HTTPS versions of the site side-by-side. HTTP is canonical right now. Goal is to change that to HTTPS. Created a new site in Search Console and submitted a new sitemap 4 days ago. ...
3
votes
3answers
5k views

In what path I can find the .crt file for Let's Encrypt SSL?

I'm trying to find the SSL .crt file that was installed on my Ubuntu server using Let's Encrypt. I used this commands below for installing Let's Encrypt free SSL: $sudo apt-get update $sudo apt-get ...
3
votes
3answers
95 views

One SSL on two sub domains

I have 2 sub-domains one for support and other for billing. I just wasnt https on these two not the main site. Can i use 1 SSL Certificate on two sub-domains, or i will need to buy two certificates ?
3
votes
2answers
2k views

SSL certificate - which one to buy? [duplicate]

Possible Duplicate: SSL certificate provider Hello, I'm trying to set up Https for my e-commerce site on webfaction hosting. Was trying to buy SSL certificate from godaddy.com which has my new ...
3
votes
4answers
125 views

Hold my hand through my htaccess http to https redirects

I've been researching the best way to handle my htaccess file in order to switch from http requests to https and I've seen everything from basing requests off server ports, using server name requests ...
3
votes
4answers
5k views

How can I set the default page for an https request?

We have a website which has a Virtual Directory containing the secure portion of the website. If users come to http://www.mydomain.com, they should get directed to default.aspx of the main site, but ...
3
votes
2answers
1k views

How bad is it for SEO to use at 302 redirection instead of 301 redirection for HTTPS?

Recently my client has configured HTTPS. I recommended that he implement 301 redirection to 200. His developer could not do that and it is still using 302 redirects. How bad it can affect a website ...