Questions tagged [https]

HTTPS is the secure version of the hypertext transfer protocol (HTTP). It usually uses port 443 and is powered by the TLS (formerly SSL) cryptographic protocol.

Filter by
Sorted by
Tagged with
3
votes
3answers
100 views

One SSL on two sub domains

I have 2 sub-domains one for support and other for billing. I just wasnt https on these two not the main site. Can i use 1 SSL Certificate on two sub-domains, or i will need to buy two certificates ?
3
votes
2answers
2k views

SSL certificate - which one to buy? [duplicate]

Possible Duplicate: SSL certificate provider Hello, I'm trying to set up Https for my e-commerce site on webfaction hosting. Was trying to buy SSL certificate from godaddy.com which has my new ...
3
votes
4answers
141 views

Hold my hand through my htaccess http to https redirects

I've been researching the best way to handle my htaccess file in order to switch from http requests to https and I've seen everything from basing requests off server ports, using server name requests ...
3
votes
4answers
6k views

How can I set the default page for an https request?

We have a website which has a Virtual Directory containing the secure portion of the website. If users come to http://www.mydomain.com, they should get directed to default.aspx of the main site, but ...
3
votes
2answers
1k views

How bad is it for SEO to use at 302 redirection instead of 301 redirection for HTTPS?

Recently my client has configured HTTPS. I recommended that he implement 301 redirection to 200. His developer could not do that and it is still using 302 redirects. How bad it can affect a website ...
3
votes
3answers
94 views

Should I make webpages default to HTTPS?

I finally decided to jump on the HTTPS bandwagon after discovering that C-Panel has an auto-HTTPS setting. But I think I've opened a can of worms; I've found myself dealing with a variety of problems. ...
3
votes
2answers
4k views

Wordpress SSL Site insecure. How do i change logo and Favicon to https?

I recently updated my Wordpress site to https but i didnt get the padlock next to the name in the browser and it says that it is insercure. I investigated using the following site: https://www....
3
votes
1answer
7k views

SSL not working on home page

Recently set up a server for a client and installed a Comodo Positive SSL certificate. In firefox everywhere on the website I can see the padlock icon which shows the Comodo verification, except the ...
3
votes
3answers
11k views

HTTPS page loading non-HTTPS images

I have an HTTPS website which links to images from a CDN, as well as user-generated image links that are not HTTPS. I get errors like this in console: The page at https://example.com displayed ...
3
votes
1answer
2k views

SSL between customer's domain having CNAME to our secured server?

We're setting up a payment service -- a few pages to collect credit cards, and do other stuff that needs to be secure. We would like to offer the service to customers via a cobranded page we serve ...
3
votes
2answers
4k views

nginx http to https redirect - just isn't working

I am running my own webserver with nginx on ubuntu 17.10. I have opened ports 80 and 443. Trying to get the HTTP to HTTPS redirect working, but everthing i seem to have tried fails. i am still ...
3
votes
1answer
2k views

SSL Labs Key exchange < 100%, why? How do I make it?

I am in progress of trying to get maximum (or almost maximum) score on SSL Labs my site: I currently don't understand why it does not give me full Key exchange score. Now, it looks like this: In ...
3
votes
2answers
206 views

Steps to implement Let's Encrypt with cPanel

I am implementing to adopt a site from http to https, I am using the Let's Encrypt in cPanel, I am in a shared hosting environment. This is how I implement it: Site in maintenance mode Issue the SSL ...
3
votes
4answers
1k views

How do I use CPanel to prevent the HTTPS URL for my site from showing somebody else's site?

Currently if you go to the https of my site it just goes to another persons site on the server nothing to do with me. Anyway, how can I just turn it off port 443 using cPanel so it just either 404's ...
3
votes
2answers
5k views

https in page url but not displaying in google search results

Why a site even when crawled with https, the indexed urls are https but the search result that google does not display https appearing in result url. The results in red have links to https but why ...
3
votes
3answers
1k views

Need a CDN with SSL [closed]

We currently use Edgecast through Speedyrails. Back when I did my research they were both fast and very cost-effective. I haven't looked in a while, but now we need SSL on our assets as well. I ...
3
votes
5answers
2k views

What is the best kind of checkout system for a website?

I have worked with quite a few checkout systems and eCommerce platforms. Are there certain kinds of interfaces that convert sales better than others? For me there are really only two questions: SSL ...
3
votes
1answer
3k views

SSL Labs Cipher Strength < 100%, why? How do I make it?

I am in a progress of trying (again) to get maximum (or almost maximum) score on SSL Labs with my site. I currently do not understand, why it does not give me full Cipher strength score. Now, it ...
3
votes
2answers
389 views

How to verify all https, www and no-www versions with Google Webmaster Tools

I recently started a WordPress blog with HTTPS and want some advice. I prefer to use HTTPS + www for my blog. In order to do that will I have to add all these 4 types of addresses to Webmaster Tools? ...
3
votes
1answer
3k views

HTTPS and China

I am currently moving a website to HTTPS. That website is used from all over the world, including China. Tools like observatory.mozilla.org only give a site a good rating, if it enforces HTTPS usage....
3
votes
2answers
103 views

non-www along with https

I need to set the following rules: redirect www to non-www (close www) redirect http to https (close http) Suppose I have example.com , How to set the above rules together in htaccess?
3
votes
2answers
94 views

Is a real http to htttps rewrite possible or is this always going to be a redirect?

I noticed that there are some articles on the Internet that talk about using the apache mod_rewrite module to rewrite a client to server http connection to https. But rewrite does all the changes ...
3
votes
1answer
1k views

Should all versions of my site (www and no; http and https) have sitemaps in Google Webmaster Tools

I recently switched our site from http to https. I'm now redirecting the old versions of our site to the new version (http://example.com, https://example.com and http://www.example.com). So in total ...
3
votes
1answer
305 views

How can I force my site to serve just HTTPS and non-www?

I have a WordPress install where all the links are https://example.com. So, users that try to access the site via https://www.example.com will see the site, but none of the images and resources will ...
3
votes
1answer
1k views

When redirecting HTTP traffic to HTTPS, is it OK to redirect non-existant pages to a 404 error?

We've recently converted several of our websites to require HTTPS on all pages. HSTS headers have been set and rules added into Apache to 301 redirect all traffic from HTTP to HTTPS. However, similar ...
3
votes
3answers
867 views

Would a self-signed certificate impact my site for search engines?

Would a self-signed certificate impact my site for search engines? By that I mean, do robots refuse to index sites with self-signed certificates?
3
votes
2answers
11k views

Redirect HTTPS request to HTTP in Apache

Can an HTTPS request be redirected to an HTTP request in Apache? If so, how?
3
votes
1answer
99 views

HTTPS on all pages where user is logged on

I know this is considered best practise to prevent cookie hijacking. I would like to adopt this approach, but ran across a problem on our forum where the users post images which either aren't posted ...
3
votes
1answer
96 views

Intermittent problem establishing a secure HTTPS connection to my site

My site gives this error when I try to visit, both on windows and ios. The thing is that it doesn't always happens, some days it works fine and the other it doesn't. Does anyone know what could be the ...
3
votes
1answer
91 views

What can I do when my Cloudflare SSL certificate isn't authorizing?

It's been over 24 hours since I activated SSL in the Crypto section of Cloudflare, but my Universal SSL Status still says "Authorizing Certificate". When I visit my site, Chrome says that the site ...
3
votes
1answer
385 views

nginx: 301 redirect to non-www, SSL urls on default_server(s)

My goal is to have nginx primarily return a check for all requested URLs that start with http:// and/or contain //www., and 301 redirect them to the URL where //www. is replaced by // and http:// ...
3
votes
2answers
1k views

How to transfer an SSL certificate from one cPanel account to another? Do I need to transfer it? I have WHM with the new account

I've moved a site to a new hosting account, and need to get SSL working again. On the old hosting account, as I understand it, the hosting provider just issued free Let's Encrypt certificates and ...
3
votes
1answer
179 views

“DNS CAA No” from ssllabs.com; Cause of Android Error?

After five months of no problems nor errors with my Comodo certificate on a personal website suddenly, as of two or three days ago, I'm getting a meddlesome, "Certificate isn't from a trusted ...
3
votes
1answer
292 views

HTTP website returns 403.4 even when using Plesk Permanent SEO-safe 301 redirect from HTTP to HTTPS

My domain has a valid and activated "Let's Encrypt!" certificate, and going to https://example.com works as it should and shows as being secure in the browser. Through Plesk Onyx 17.5.3 I have ...
3
votes
1answer
648 views

Google Analytics direct traffic dropped by 50% after switching to https

everyone, have a little dilemma and was hoping to get some advice here. I recently installed a new SSL (3 months ago) to force our URL to start with https://. The site was earlier accessible through ...
3
votes
2answers
78 views

Is SSL a Major Contributing Factor to Website Speed

I have nearly a perfect score on Pingdom Results: https://tools.pingdom.com/#!/tU1lz/https://varmag.com/ If I'm not mistaken, it looks like SSL is what's slowing me down? Doing some research, If I'm ...
3
votes
2answers
1k views

Forcing HTTPS and WWW with apache

Apache does not force HTTPS in a subfolder of a folder, but it works in the first level subfolders. Here are all the HTAccess snippets I have tried: RewriteCond %{HTTP:CF-Visitor} '"scheme":"http"' ...
3
votes
1answer
661 views

How do search engines handle protocol-relative links?

With many sites supporting but not requiring HTTPS now, there's an increase in protocol-relative links. A protocol-relative link is one where the protocol is not specified, and the browser redirects ...
3
votes
1answer
2k views

Multiple Apache vhosts with Basic Auth & SSL

I'm just getting started using Apache and I pretty much have everything configured the way I want, I'm just having trouble with one aspect. A quick overview: I have a document root of "/var/www", ...
3
votes
3answers
119 views

Any reason not to buy SSL certificates from a reseller?

Is there any reason to buy an SSL certificate directly from the host (for $49, for example), instead of through a well-known reseller, for only $10.95? Specifically in my case, I just need to ...
3
votes
1answer
156 views

Ensuring secure downloads for IIS

One of my customers wants to make sure that when someone downloads a file from their website the file being downloaded is secure from third parties capturing the downloaded information. Their site is ...
3
votes
2answers
4k views

Automatic redirection from http to https with .htaccess authentication in virtual hosting

Hi I have configured Virtual host on apache with .htaccess authentication with SSL. It's working fine when I typed url https://www.example.com:9004/test.php but when I typed http://www.example.com:...
3
votes
1answer
291 views

HTTPS connection treated differently across browsers

I am using an SSL certificate for a website and the server redirects all http connections to https (a conscious choice). A tool provided by the CA says that the certificate has been installed ...
3
votes
2answers
687 views

What will be the impact on SEO if we remove our SSL certificate (url become http instead of https)?

For some weird reason the content accessed though our domains is returned via SSL HTTPS on all domains pointing to the server. https://domain.com leads to our website, with a proper SSL certificate (...
3
votes
1answer
115 views

Do I need an SSL Certificate?

I'm thinking about building an app that lets users upload images to sites like Flickr. They would need to enter their password to do this. I would send the data through PHP, do I need to get a SSL ...
3
votes
1answer
269 views

Should every page on every site be behind SSL?

This question stemmed from a discussion here: Ad networks that will serve via HTTPS? My question to the OP was "is it necessary to have every page behind SSL?" Admittedly at the time of posting this ...
3
votes
2answers
372 views

CA For A Large Intranet

I'm managing what has become a very large intranet (over 100 different hosts / services) and will be stepping down from my role in the near future. I want to make things easy for the next victim ...
3
votes
1answer
128 views

Are short expiration and lack of warranty disadvantages of cPanel's AutoSSL?

I am trying to make my site HTTPS due to SEO and integration support with websites such as facebook. For this, I need to purchase an SSL certificate. But I saw control panel & WHM gives me option ...
3
votes
1answer
3k views

Nginx fails to start HTTP/2 server due to error: unknown log format

In our hosting server from the Plesk cpanel, Nginx is configured to work as a reverse proxy engine. As I need to enable HTTP/2 that can speed up the loading time of Plesk and hosted websites. ...
3
votes
2answers
891 views

.htaccess using HTTP_HOST has one extra extraneous redirect when forcing HTTPS

When I use these lines in my .htaccess file, everything works well: RewriteEngine On RewriteCond %{HTTPS} !=on RewriteRule ^(.*)$ https://example.com%{REQUEST_URI} [L,R=301] Then I tried to make it ...

1
3 4
5
6 7
18