Podcast #128: We chat with Kent C Dodds about why he loves React and discuss what life was like in the dark days before Git. Listen now.

Questions tagged [https]

HTTPS is the secure version of the hypertext transfer protocol (HTTP). It usually uses port 443 and is powered by the TLS (formerly SSL) cryptographic protocol.

Filter by
Sorted by
Tagged with
3
votes
3answers
10k views

HTTPS page loading non-HTTPS images

I have an HTTPS website which links to images from a CDN, as well as user-generated image links that are not HTTPS. I get errors like this in console: The page at https://example.com displayed ...
3
votes
1answer
2k views

SSL between customer's domain having CNAME to our secured server?

We're setting up a payment service -- a few pages to collect credit cards, and do other stuff that needs to be secure. We would like to offer the service to customers via a cobranded page we serve ...
3
votes
1answer
1k views

SSL Labs Key exchange < 100%, why? How do I make it?

I am in progress of trying to get maximum (or almost maximum) score on SSL Labs my site: I currently don't understand why it does not give me full Key exchange score. Now, it looks like this: In ...
3
votes
2answers
200 views

Steps to implement Let's Encrypt with cPanel

I am implementing to adopt a site from http to https, I am using the Let's Encrypt in cPanel, I am in a shared hosting environment. This is how I implement it: Site in maintenance mode Issue the SSL ...
3
votes
4answers
1k views

How do I use CPanel to prevent the HTTPS URL for my site from showing somebody else's site?

Currently if you go to the https of my site it just goes to another persons site on the server nothing to do with me. Anyway, how can I just turn it off port 443 using cPanel so it just either 404's ...
3
votes
2answers
5k views

https in page url but not displaying in google search results

Why a site even when crawled with https, the indexed urls are https but the search result that google does not display https appearing in result url. The results in red have links to https but why ...
3
votes
3answers
1k views

Need a CDN with SSL [closed]

We currently use Edgecast through Speedyrails. Back when I did my research they were both fast and very cost-effective. I haven't looked in a while, but now we need SSL on our assets as well. I ...
3
votes
5answers
2k views

What is the best kind of checkout system for a website?

I have worked with quite a few checkout systems and eCommerce platforms. Are there certain kinds of interfaces that convert sales better than others? For me there are really only two questions: SSL ...
3
votes
2answers
3k views

nginx http to https redirect - just isn't working

I am running my own webserver with nginx on ubuntu 17.10. I have opened ports 80 and 443. Trying to get the HTTP to HTTPS redirect working, but everthing i seem to have tried fails. i am still ...
3
votes
2answers
383 views

How to verify all https, www and no-www versions with Google Webmaster Tools

I recently started a WordPress blog with HTTPS and want some advice. I prefer to use HTTPS + www for my blog. In order to do that will I have to add all these 4 types of addresses to Webmaster Tools? ...
3
votes
2answers
100 views

non-www along with https

I need to set the following rules: redirect www to non-www (close www) redirect http to https (close http) Suppose I have example.com , How to set the above rules together in htaccess?
3
votes
2answers
78 views

Is a real http to htttps rewrite possible or is this always going to be a redirect?

I noticed that there are some articles on the Internet that talk about using the apache mod_rewrite module to rewrite a client to server http connection to https. But rewrite does all the changes ...
3
votes
1answer
1k views

Should all versions of my site (www and no; http and https) have sitemaps in Google Webmaster Tools

I recently switched our site from http to https. I'm now redirecting the old versions of our site to the new version (http://example.com, https://example.com and http://www.example.com). So in total ...
3
votes
1answer
303 views

How can I force my site to serve just HTTPS and non-www?

I have a WordPress install where all the links are https://example.com. So, users that try to access the site via https://www.example.com will see the site, but none of the images and resources will ...
3
votes
1answer
909 views

When redirecting HTTP traffic to HTTPS, is it OK to redirect non-existant pages to a 404 error?

We've recently converted several of our websites to require HTTPS on all pages. HSTS headers have been set and rules added into Apache to 301 redirect all traffic from HTTP to HTTPS. However, similar ...
3
votes
3answers
858 views

Would a self-signed certificate impact my site for search engines?

Would a self-signed certificate impact my site for search engines? By that I mean, do robots refuse to index sites with self-signed certificates?
3
votes
2answers
10k views

Redirect HTTPS request to HTTP in Apache

Can an HTTPS request be redirected to an HTTP request in Apache? If so, how?
3
votes
1answer
99 views

HTTPS on all pages where user is logged on

I know this is considered best practise to prevent cookie hijacking. I would like to adopt this approach, but ran across a problem on our forum where the users post images which either aren't posted ...
3
votes
1answer
64 views

What can I do when my Cloudflare SSL certificate isn't authorizing?

It's been over 24 hours since I activated SSL in the Crypto section of Cloudflare, but my Universal SSL Status still says "Authorizing Certificate". When I visit my site, Chrome says that the site ...
3
votes
1answer
277 views

nginx: 301 redirect to non-www, SSL urls on default_server(s)

My goal is to have nginx primarily return a check for all requested URLs that start with http:// and/or contain //www., and 301 redirect them to the URL where //www. is replaced by // and http:// ...
3
votes
1answer
99 views

“DNS CAA No” from ssllabs.com; Cause of Android Error?

After five months of no problems nor errors with my Comodo certificate on a personal website suddenly, as of two or three days ago, I'm getting a meddlesome, "Certificate isn't from a trusted ...
3
votes
1answer
248 views

HTTP website returns 403.4 even when using Plesk Permanent SEO-safe 301 redirect from HTTP to HTTPS

My domain has a valid and activated "Let's Encrypt!" certificate, and going to https://example.com works as it should and shows as being secure in the browser. Through Plesk Onyx 17.5.3 I have ...
3
votes
1answer
608 views

Google Analytics direct traffic dropped by 50% after switching to https

everyone, have a little dilemma and was hoping to get some advice here. I recently installed a new SSL (3 months ago) to force our URL to start with https://. The site was earlier accessible through ...
3
votes
2answers
78 views

Is SSL a Major Contributing Factor to Website Speed

I have nearly a perfect score on Pingdom Results: https://tools.pingdom.com/#!/tU1lz/https://varmag.com/ If I'm not mistaken, it looks like SSL is what's slowing me down? Doing some research, If I'm ...
3
votes
2answers
1k views

Forcing HTTPS and WWW with apache

Apache does not force HTTPS in a subfolder of a folder, but it works in the first level subfolders. Here are all the HTAccess snippets I have tried: RewriteCond %{HTTP:CF-Visitor} '"scheme":"http"' ...
3
votes
1answer
648 views

How do search engines handle protocol-relative links?

With many sites supporting but not requiring HTTPS now, there's an increase in protocol-relative links. A protocol-relative link is one where the protocol is not specified, and the browser redirects ...
3
votes
1answer
2k views

Multiple Apache vhosts with Basic Auth & SSL

I'm just getting started using Apache and I pretty much have everything configured the way I want, I'm just having trouble with one aspect. A quick overview: I have a document root of "/var/www", ...
3
votes
3answers
119 views

Any reason not to buy SSL certificates from a reseller?

Is there any reason to buy an SSL certificate directly from the host (for $49, for example), instead of through a well-known reseller, for only $10.95? Specifically in my case, I just need to ...
3
votes
1answer
133 views

Ensuring secure downloads for IIS

One of my customers wants to make sure that when someone downloads a file from their website the file being downloaded is secure from third parties capturing the downloaded information. Their site is ...
3
votes
2answers
4k views

Automatic redirection from http to https with .htaccess authentication in virtual hosting

Hi I have configured Virtual host on apache with .htaccess authentication with SSL. It's working fine when I typed url https://www.example.com:9004/test.php but when I typed http://www.example.com:...
3
votes
1answer
285 views

HTTPS connection treated differently across browsers

I am using an SSL certificate for a website and the server redirects all http connections to https (a conscious choice). A tool provided by the CA says that the certificate has been installed ...
3
votes
2answers
680 views

What will be the impact on SEO if we remove our SSL certificate (url become http instead of https)?

For some weird reason the content accessed though our domains is returned via SSL HTTPS on all domains pointing to the server. https://domain.com leads to our website, with a proper SSL certificate (...
3
votes
1answer
115 views

Do I need an SSL Certificate?

I'm thinking about building an app that lets users upload images to sites like Flickr. They would need to enter their password to do this. I would send the data through PHP, do I need to get a SSL ...
3
votes
1answer
269 views

Should every page on every site be behind SSL?

This question stemmed from a discussion here: Ad networks that will serve via HTTPS? My question to the OP was "is it necessary to have every page behind SSL?" Admittedly at the time of posting this ...
3
votes
2answers
362 views

CA For A Large Intranet

I'm managing what has become a very large intranet (over 100 different hosts / services) and will be stepping down from my role in the near future. I want to make things easy for the next victim ...
3
votes
1answer
1k views

Nginx fails to start HTTP/2 server due to error: unknown log format

In our hosting server from the Plesk cpanel, Nginx is configured to work as a reverse proxy engine. As I need to enable HTTP/2 that can speed up the loading time of Plesk and hosted websites. ...
3
votes
1answer
1k views

421 Misdirected Request on Shared Host

I am on a shared host (Apache) and am receiving little help resolving this issue. I have a main domain https://www.waldorfteacherresources.com and I have set up two cookieless domains: static....
3
votes
2answers
691 views

.htaccess using HTTP_HOST has one extra extraneous redirect when forcing HTTPS

When I use these lines in my .htaccess file, everything works well: RewriteEngine On RewriteCond %{HTTPS} !=on RewriteRule ^(.*)$ https://example.com%{REQUEST_URI} [L,R=301] Then I tried to make it ...
3
votes
1answer
970 views

HTTP to HTTPS redirect for a specific domain through web.config

I'm trying to do a HTTP to HTTPS redirect on a GoDaddy web hosting platform. I have the Windows hosting platform and I'm editing the web.config file. There are multiple domains under this hosting ...
3
votes
1answer
4k views

How can I configure multiple HTTPS sites on one IIS intranet server using a single IP address?

I have an IIS 8.5 server running on our intranet. We'll call it MYIISSERVER. It has only one IP address. Under MYIISSERVER, I have several sites: Site1 - currently to access this site we use the ...
3
votes
1answer
375 views

Performance Issues Using SSL With Cloudflare

I have been using Cloudflare for a while without much consideration to what it was doing. Today I have noticed that there is around 500ms of delay when I view a web page over https when Cloudflare is ...
3
votes
2answers
796 views

https://example.com and https://www.example.com: Should I use one or two SSL certificates?

I am in the process of enabling HTTPS on my web sites. I have a web site, let's call it example.com, which is available both with and without a www. prefix. I can now: request one SSL certificate ...
3
votes
3answers
318 views

Getting a “Potentially unsafe content” error on my WordPress site in MS Edge Browser

Some users have reported this error generated by Windows Defender SmartScreen in the MS Edge browser. No problems in the other browsers. Here's a screenshot of the error: It's been reported by ...
3
votes
1answer
3k views

Prevent HTTPS forward on GoDaddy

I'm working on building my first website in a non-corporate environment. When I go to http://example.com it works fine. But when my friend tried, they found that GoDaddy forces HTTPS everywhere and ...
3
votes
1answer
2k views

Apache not serving XML file with correct mime type after migration to HTTPS

I've just migrated my website from HTTP to HTTPS. And now my sitemap.xml file is no longer served as XML: https://www.pretty-story.com/sitemap_index.xml Any idea what could be the cause? Is there ...
3
votes
1answer
746 views

310 ERR_TOO_MANY_REDIRECTS error after enabling ssl certificate in nopcommerce

After I installed and turned on a SSL certificate, I began to receive 310 errors. The site is built with nopcommerce. SSL Settings on the site are all included:
3
votes
2answers
506 views

Redirecting specific URL from HTTPS to HTTP

Long time lurker, first time caller... I have a backend like admin.mysite.com which is able to use HTTPS (has a certificate installed, etc) - but that admin portal is a CMS backend for a number of ...
3
votes
2answers
336 views

a strange error in IE8 when connecting to my site remotely

I'll explain. I ran tests on my website at webpagetest.org and when I use IE8 on that site in Dulles VA, The website and ads load fine. I then made a test from Singapore because from other tools, it ...
3
votes
1answer
146 views

Easiest way to preview https over localhost?

I'm creating a site that will be served over https when deployed. That means urls in the links of the site et cetera are https://... But now it's in an emerging state and I preview it on localhost. ...
3
votes
1answer
95 views

Fix OpenSSL CCS vulnerability on Ubuntu 14.04

I just installed an SSL certificate from Let's Encrypt on one of my domains. Everything was fine, green lock icon on Chrome. But just to be sure, I checked the domain on ssllabs.com. And to my ...