Questions tagged [https]

HTTPS is the secure version of the hypertext transfer protocol (HTTP). It usually uses port 443 and is powered by the TLS (formerly SSL) cryptographic protocol.

Filter by
Sorted by
Tagged with
4
votes
2answers
13k views

htaccess force HTTPS except one page

This is my current .htaccess file: RewriteEngine On ErrorDocument 404 /404.html # 1 RewriteRule ^extra/([0-9]+)/(.*).html?$ pages.php?do=view&id=$1 RewriteRule ^special-bonus/([0-9]+)/(.*).html?$ ...
4
votes
1answer
2k views

HTTP/HTTPS duplicate content 301 vs canonical

I thought I would ask a question as the amount of different sources that say this is right or that isn't right is unbelievable. Let me tell you my situation, at the moment, my boss wanted me to add ...
4
votes
1answer
428 views

2048 bit SSL overhead [closed]

Can you guys help me learn some ssl networking basics plz? What is a SSL transaction (a full handshake?) Why do people think 2k ssl will melt netscalers (ssl trans/sec exceed netscaler max ssl trans/...
4
votes
2answers
2k views

running multiple name-based web applications on a single ip address with SSL

I'm working on web projects. My scenario is I have two web applications running on one single web server (Apache). Due to my company policy, they ask me to put both of them on SSL (Port #443), no ...
4
votes
4answers
3k views

Firefox reports HTTPS page to contain non-secure elements

When I visit our web site pages with IE over HTTPS, it reports the web site as protected (i.e. no elements are taken using HTTP). The same page, when loaded to Firefox, causes Firefox to complain that ...
4
votes
3answers
64 views
+50

Drop in referral data due to HTTP, changed to HTTPS no recovery referral data since (in the last year)

We changed our site from HTTP to HTTPS about a year ago. We have a static website, with no functionality for user input, so did not see it as an imperative to change to HTTPS anytime sooner, the ...
4
votes
1answer
1k views

Cloudflare not redirecting to HTTPS

I set it up, and set "Automatic HTTPS Rewrites" to "ON", BUT this still not redirecting me to the https by default when the page is requested via http... accessing the page manually by putting https ...
4
votes
1answer
152 views

Are Commercial SSL Certificates (key file, and certificate file) portable when migrating between a new and old Apache2 server?

We have an SSL Certificate that's currently on our Apache2 server for transferring traffic over the https protocol. We are migrating away from this server to at another data center with a different ...
4
votes
2answers
392 views

Migrating SSL cert to new server

We are moving from an OSCommerce website to a Magento website on a different server but with the exact same domain name. The OSCommerce site has a SHA-1 SSL cert with goDaddy which I will change to a ...
4
votes
2answers
5k views

Mixed content - SSL Problem or Opencart?

This question is related with: Duplicated content www on subdomain and SSL My actual HTACCESS: RewriteBase / # this redirects example.com and www.example.com to https - thanks closetnoc @webmasters-...
4
votes
1answer
87 views

How to let users know that the site is available over HTTPS?

My websites are now available over HTTPS, but I don't want to make that the default at this point: My canonical URLs are still HTTP and I'm not ready to make the SEO switch My certificates are SNI ...
4
votes
2answers
23k views

Wild card redirection for HTTPS and Non-www version

I want to enable SSL for my main website and sub-domain websites. For SEO reasons, I need to redirect HTTP requests to HTTPS requests. I think I should do that using a wild card redirect in my ....
4
votes
1answer
1k views

Use SSL on Heroku without paying Heroku for SSL?

In this post, the author suggest a way to get SSL on Heroku without paying Heroku for it: Pay Cloudflare for premium service, and get SSL support with it. Create a CNAME in cloudflare that points to ...
4
votes
1answer
55 views

HTTPS Causes Broken Back Links?

If I change my URL to force https does this effect all of my backlinks to be broken and to be lost one by one? And if so if I change it back will it will this restore the back links on the site? Any ...
4
votes
3answers
8k views

DNS configuration to force root domain to www

we have an app running on heroku. the dns setup is like this: A record for domain.com -> heroku front end ip addresses CNAME for www.domain.com -> specific host name for our app provided by heroku ...
4
votes
1answer
3k views

How can mixed content compromise an entire HTTPS session?

Google Chrome is probably one of the stricter browsers out there in terms of highlighting SSL errors. Most browsers will point out when you are viewing an HTTPS page which loads insecure images/...
4
votes
3answers
4k views

Session cookie being dropped when moving under the SSL

The short version: I've got a session cookie being set on a dev site but it's not being picked up when I move to the SSL (so the shopping cart empties when you go to the checkout). When it's set on ...
4
votes
1answer
53 views

How would you implement redirects for domain canonicalization, no-www, and HTTPS for IIS 7.5

For the moment I'm stuck with an IIS-server, unfortunately not my best subject (I'm much better w. Apache). We have a site on a Win 2008 R2 Server with IIS 7.5. It's an old site and we are working on ...
4
votes
2answers
167 views

Will my Facebook comments get lost under these scenarios?

I want to integrate Facebook comments to my blog. According to my research, the page is treated as an object. So all the comments are tied to this object. This object itself is the page URL. Now I ...
4
votes
2answers
1k views

SSLCipherSuite settings not taking effect from Apache ssl.conf, only when duplicated in each virtual host

I have an odd issue. The SSLProtocol config is getting applied in my ssl.conf file but the SSLCipherSuite config is not. I have tested this by changing each option and running scan with Qualys SSL ...
4
votes
1answer
78 views

Google wants sites to use SSL, but complains when compression is turned off to prevent BREACH hacks

Google has let it be known that they want websites to move to SSL, and they will start making it more and more clear that HTTP sites are 'insecure'. But then using their PageSpeed tool, they will mark ...
4
votes
1answer
531 views

Wix sitemap for http and https

I have a website hosted in Wix and as you may know it automatically keeps a sitemap there (sitemap.xml). Now that I activated https to my site, I read I should add another property on Google Search ...
4
votes
1answer
5k views

How to redirect HTTPS to HTTP behind proxy (CloudFlare)

I want to redirect HTTPs to HTTP, I tried following code in .htaccess file Options +FollowSymlinks RewriteEngine on RewriteCond %{SERVER_PORT} ^443$ RewriteRule ^(.*)$ http://www.yourdomain.com/$1 [R=...
4
votes
1answer
427 views

Best practices for adding SSL and preserving backlinks

If I have many backlinks that points to http://example.com and then enforce SSL so that the URL then becomes https://example.com, What should I do to ensure that I do not lose these backlinks? One ...
4
votes
2answers
1k views

How to use HTTPS canonical link tag in Blogger blog?

Look out, Google official security blog - http://googleonlinesecurity.blogspot.com Above blog forced user to visit https link (without using any kind of JS), but normal Blogger blog serve both ...
4
votes
2answers
2k views

Google Analytics HTTP vs HTTPS

I want to use Google Analytics on a website that uses both HTTP and HTTPS that works as explained below: Secure pages accessed through https://mydomain.com/secure/* are always on HTTPS. Any access to ...
4
votes
1answer
159 views

SSL: What are the differences between Domain Validation and Extended Validation Certificates?

I can get Extended Validation for cheaper than Domain Validation, yearly. What are the differences between them?
4
votes
2answers
1k views

Redirect non-www to www while preserving protocol

I am aware of the fact that there are tons of questions in this section and in server fault dealing with re-directions from non-www to www URLs. But I couldn't find one dealing with this issue while ...
4
votes
2answers
842 views

Impact of migrating home page from HTTP to HTTPS on search results

I've had to change one of my site's home page to HTTPS from HTTP. I had plenty of links coming into the HTTP page and was performing well in Google against many of my targeted search phrases. I did a ...
4
votes
1answer
712 views

How to add force https to htaccess file RewriteRule with _route_=$1

I inherited support for an Opencart 1.5 site which needs to have SSL enabled. I've edited the config.php files in / and admin/ and adding https:// to the URL is working in the browser and links are ...
4
votes
2answers
207 views

HTTPS for website without form and login

I would like to know if it is necessary, to avoid Google penalties and chrome warnings, by enabled HTTPS on a website that does not have a login page or a form. In some cases the website can have a ...
4
votes
1answer
39 views

HTTPS implementation. Should I change pre-head tags?

I implemented HTTPS on all the webpages of my website. My browser tells me it's a "Secure connection" with a green signal. I double-checked that all the images, CSS files, JS files, etc. were HTTPS, ...
4
votes
1answer
1k views

Google warning about SSL/TLS certificate

I received this warning from Google Webmaster Tools. I have SSL for www and non-www but they are in different SANS. Would that cause a problem? SSL/TLS certificate does not include domain name ...
4
votes
2answers
3k views

Facebook likes reset after moving to HTTPS

I've got a question regarding the Facebook like button. We worked on a piece recently that embeds a number of social share buttons (please see the source code below). When the piece was released, it ...
4
votes
2answers
696 views

Serving WordPress menu links in only HTTPS or HTTP depending on how it's accessed

I have a WordPress site which uses WordPress HTTPS to enable SSL when users access it via that protocol. However, currently the menu links point back to the HTTP version. I want users to be linked ...
4
votes
1answer
114 views

How to determine the sequence of ordering certificates by browser?

I did a Mutual Certificate Authentication implementation with OpenSSL and Apache Web Server on CentOS platform. To simple explanation see this diagram: ---------- | ...
4
votes
1answer
2k views

How to track HTTP and HTTPS from the same Google Analytics account?

I have a website with tutorials and a discuss forum. The website load on http protocol and the forum load with https for security reasons. For both of them I run the default Google Analytics code, but ...
4
votes
0answers
45 views

Redirecting www and non www to HTTPS on blogger

I have a blog on Blogger and have activated HTTPS. This link works: https://www.example.com But this does not: https://example.com/ Is there a solution to this problem?
4
votes
1answer
457 views

When does SSL handshake happen in real world

I am about to setup an SSL certificate for my site. The system asked me if I want a 2048 or 4096 bit key. I've read enough about the key strength and increased latency/handshake time as well as server ...
3
votes
2answers
149 views

Switching domain from HTTPS to HTTP

I recently launched a new site on an already existing domain, using new hosting. The previous site utilized HTTPS, the new site does not (just HTTP). The problem I've ran into is that Google ...
3
votes
2answers
380 views

Will canonical tag referencing unsecure HTTP URLs on a HTTPS page cause the unsecure message?

If a secure HTTPS page has a canonical tag referencing the HTTP version, will this cause the message in the browser that the page is using unsecure elements and prevent the green lock icon appearing? ...
3
votes
3answers
1k views

HTTP to HTTPS: Wait for new sitemap to be indexed?

Running HTTP and HTTPS versions of the site side-by-side. HTTP is canonical right now. Goal is to change that to HTTPS. Created a new site in Search Console and submitted a new sitemap 4 days ago. ...
3
votes
3answers
88 views

One SSL on two sub domains

I have 2 sub-domains one for support and other for billing. I just wasnt https on these two not the main site. Can i use 1 SSL Certificate on two sub-domains, or i will need to buy two certificates ?
3
votes
2answers
2k views

SSL certificate - which one to buy? [duplicate]

Possible Duplicate: SSL certificate provider Hello, I'm trying to set up Https for my e-commerce site on webfaction hosting. Was trying to buy SSL certificate from godaddy.com which has my new ...
3
votes
4answers
123 views

Hold my hand through my htaccess http to https redirects

I've been researching the best way to handle my htaccess file in order to switch from http requests to https and I've seen everything from basing requests off server ports, using server name requests ...
3
votes
3answers
3k views

HTTPS and HTTP URLs point to different places?

I own and use a domain for a project. When I type in my domain preceeded by HTTPS instead of HTTP, I am re-directed to a compromising website. How is this possible? Did somebody buy the HTTPS ...
3
votes
4answers
5k views

How can I set the default page for an https request?

We have a website which has a Virtual Directory containing the secure portion of the website. If users come to http://www.mydomain.com, they should get directed to default.aspx of the main site, but ...
3
votes
2answers
1k views

How bad is it for SEO to use at 302 redirection instead of 301 redirection for HTTPS?

Recently my client has configured HTTPS. I recommended that he implement 301 redirection to 200. His developer could not do that and it is still using 302 redirects. How bad it can affect a website ...
3
votes
3answers
94 views

Should I make webpages default to HTTPS?

I finally decided to jump on the HTTPS bandwagon after discovering that C-Panel has an auto-HTTPS setting. But I think I've opened a can of worms; I've found myself dealing with a variety of problems. ...
3
votes
2answers
10k views

Changing sitemap.xml and robots.txt after moving from http to https

I am migrating a website from http to https entirely, all http urls will have 301 redirects to their https counterparts. From https://support.google.com/webmasters/answer/6033049 We reference our ...