85 votes
Accepted

What is the benefit of forcing a site to load over SSL (HTTPS)?

HTTPS does not just provide secrecy (of which you are doubting the value, though there are good reasons for it still) but also authenticity, which is always of value. Without it, a malicious access ...
R.. GitHub STOP HELPING ICE's user avatar
40 votes
Accepted

What happens if you don't set cache-control header?

If there is no Cache-Control header and no Expires header, but there is a Last-Modified header (which most web servers send by default for static assets), most browsers will use heuristic freshness to ...
Tim Fountain's user avatar
  • 4,454
34 votes

What is the need of methods like GET and POST in the HTTP protocol?

Please note the question has changed/been clarified since this answer was first written. A further response to the latest iteration of the question is after the second horizontal rule What is the ...
Caius Jard's user avatar
25 votes

What is the benefit of forcing a site to load over SSL (HTTPS)?

"nothing secret on the site" ...According to you. There migh be a perfectly fine reason someone wants a secure connection. It (partly) creates privacy: My admin can see that I'm browsing some ...
Martijn's user avatar
  • 6,806
24 votes
Accepted

HTTP Status Code: Response with 101 or 301?

The correct status code to use here is without a doubt 301 Moved Permanently. 101 Switching Protocols is an internal status code that a server generally uses to automatically negotiate certain types ...
Maximillian Laumeister's user avatar
16 votes
Accepted

What is the purpose of GETting this external file?

It is used by Firefox when detecting whether it is using a captive portal. A captive portal is a Web page that the user of a public-access network is obliged to view and interact with before access ...
Steve's user avatar
  • 8,458
13 votes
Accepted

How can I find out what other websites are hosted from my website IP address and why is that important from SEO point of view?

To complete the other answers, there is no authoritative database of complete IP -> name mappings. DNS provides for two kinds of mappings: name -> IP. Multiple names can map to a single IP IP -> ...
jcaron's user avatar
  • 480
13 votes

What is the need of methods like GET and POST in the HTTP protocol?

HTTP can be thought of as one specific case of generic principles of Remote Procedure Call: you tell the server what you want with some variable field in the request, the server responds accordingly. ...
aaa's user avatar
  • 266
12 votes

What is the benefit of forcing a site to load over SSL (HTTPS)?

You get HTTP/2 support, the new web standard designed to significantly improve website loading speeds. Because browser makers have chosen to support HTTP/2 only over HTTPS, enabling HTTPS (on a ...
user2428118's user avatar
12 votes

HTTP Status Code: Response with 101 or 301?

No - 101 Switching Protocols is not appropriate for redirecting to HTTPS, as this status indicates that the current connection should be upgraded to the new protocol, whereas a redirect instructs the ...
HappyDog's user avatar
  • 221
10 votes

What is the benefit of forcing a site to load over SSL (HTTPS)?

(Parts taken from my answer to a similar question.) HTTPS can achieve two things: Authentication. Making sure that the visitor is communicating with the real domain owner. Encryption. Making sure ...
unor's user avatar
  • 21.7k
9 votes

How to avoid SSL warnings about certificate not for the current site when redirecting alternate domains?

Cloudflare is a free solution for redirecting your alternate domains with HTTPS support. Here are detailed instructions for setting it up: Visit Cloudflare Create an account and verify your email ...
Stephen Ostermiller's user avatar
8 votes

How can I find out what other websites are hosted from my website IP address and why is that important from SEO point of view?

Don't know if it's possible with simple command, but there are special "Reverse-IP" services just for that, check that one for example: http://viewdns.info/reverseip/ Apparently if you share IP with ...
GreggD's user avatar
  • 211
7 votes

How can I find out what other websites are hosted from my website IP address and why is that important from SEO point of view?

To answer your question directly: No, in most cases there is no negative impact for sharing an IP with a bad domain. How do I know this? I am the SEO oracle. I come from the future to save humanity. ...
dhaupin's user avatar
  • 3,339
7 votes

Will it have a negative influence on search engine ranking if my main site is working over HTTPS but my blog isn't?

Since 2014, Google has been giving websites available over HTTPS a slightly higher search engine ranking score. Given that your blog is only available over HTTP, it may appear lower in the results for ...
user2428118's user avatar
7 votes

What is the need of methods like GET and POST in the HTTP protocol?

From my personal point-of-view as a developer, it can make creating API endpoints much easier. For instance if I write a controller that manages products on a website I can use the same URL to do ...
Kris Sinclair's user avatar
6 votes

Is HTTP code 401 or 403 appropriate for when a logged in user is not allowed to view the data?

Perfectly explained in this URL: https://web.archive.org/web/20131026070133/http://danielirvine.com/blog/2011/07/18/understanding-403-forbidden/ There’s a problem with 401 Unauthorized, the HTTP ...
Mani's user avatar
  • 1,317
6 votes

What is the benefit of forcing a site to load over SSL (HTTPS)?

It prevents man in the middle attacks that make you think you are visiting your site but present a page that is actually from another and may attempt to get info from you. Since the data is encrypted, ...
Rob's user avatar
  • 4,613
6 votes
Accepted

what is the meaning and use case of each URL encoding Reserved Characters

What does each of this characters mean in context of an URI? Note that a URI consists of several different "contexts" or parts. eg. the scheme, host, URL-path, query string and fragment ...
MrWhite's user avatar
  • 42.8k
6 votes
Accepted

Does changing from HTTPS to HTTP kill my backlinks?

Google will switch between https and http (and vice versa) without any noticeable link juice loss - as long as the links (apart from prefix) are identical. However if you want to make sure that your ...
garth's user avatar
  • 1,079
6 votes
Accepted

HTTP webpage is showing "Not Secure" in Chrome

This is a move to make the web more secure. Additionally, it protects all visitors to your site. The long-term solution is to implement SSL on your website(s), as all websites will eventually need to ...
Josh Salganik's user avatar
6 votes
Accepted

Is a PHP POST using cURL from HTTPS site to HTTP endpoint encrypted securely?

Short answer: no, it is not encrypted. The only thing that matters is the URL you are using to send content, what happened before is irrelevant. If you are sending your content to an HTTP URL then ...
Patrick Mevzek's user avatar
6 votes

What is the need of methods like GET and POST in the HTTP protocol?

What is the need of methods like GET and POST in the HTTP protocol? It seems that you forgot the old days when HTTP servers were there just to serve files; not running script, CGI, or making dynamic ...
xwindows -on strike-'s user avatar
5 votes

Proper status code for language redirection (301, 302, … 307)?

For users either a 302 or 307 redirect is fine. The only practical difference between those and a 301 redirect is caching. Browsers cache a 301 redirect. If the user changes their browser language ...
Stephen Ostermiller's user avatar
5 votes
Accepted

What benefits are there to having both HTTP and HTTPS protocols indexed by Google?

None. This is harmful for SEO, and is likely to result in duplicate content issues, split inbound link profiles, incompatibility with secure iframes, and other such unpleasantness. The reason you see ...
Henry Visotski's user avatar
5 votes
Accepted

What headers used in request by google bot?

if ($_SERVER['HTTP_CACHE_CONTROL'] == 'no-cache') { Also bear in mind that the Cache-Control HTTP request header (as with most request headers) are entirely optional, so may not be present as part of ...
MrWhite's user avatar
  • 42.8k
5 votes
Accepted

HTTP2 is enabled and working, but PHP $_SERVER['SERVER_PROTOCOL'] still says "HTTP/1.1"

This has to do with how Cloudflare connects to servers. Although it does serve the client via HTTP2 (or HTTP3), it still connects to the server itself via HTTP1.1. Cloudflare only uses HTTP/1.x ...
GreatBlakes's user avatar
5 votes
Accepted

Redirecting bare domain to www doesn't when specifying http/https scheme

Namecheap does not offer HTTPS for redirects. It would be better to implement the redirect at your hosting company so that they can do HTTPS for the redirect. This page has instructions about half ...
Stephen Ostermiller's user avatar
5 votes
Accepted

What browser is Mozilla/5.0 (Linux; Android 10; SM-A202F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.120 Mobile Safari/537.36?

Below is the syntax for the User Agent header: User-Agent: Mozilla/5.0 (<system-information>) <platform> (<platform-details>) <extensions> In your case we have. Mozilla/5.0 (...
Mike Ciffone's user avatar
  • 6,360
5 votes

Can a use a masked redirect from an alternate domain using the HTTPS of the main domain?

No. Not the way you describe it. Masking is marketing speak for embedding a site within another site (using an iframe), and its a questionable practice at best. The takeaway point is that the http ...
davidgo's user avatar
  • 7,939

Only top scored, non community-wiki answers of a minimum length are eligible