Hot answers tagged

4

As browsers are more and more frowning upon such cases the only real solution is to make sure that all the content is served over HTTPS (more precisely: if the page is served over HTTPS then everything it depends on - fonts, scripts, stylesheets, iframes, etc. - is also served over HTTPS; if the page is server itself over HTTP, the other content can be be ...


4

You just need to give it time. A couple days is no where near enough. Google will move your site over to HTTPS in its search index one page at a time. Depending on the size of your site, the process could take up to a year. See HTTP to HTTPS: Wait for new sitemap to be indexed? In addition, rankings sometimes worsen in Google when redirecting to HTTPS. ...


4

In this day and age, HTTP is still the default protocol if the user types something into the address bar and doesn't specify a protocol at all. Most webmasters that want their users to only use HTTPS will leverage some redirect mechanism of the webserver, to receive the requested HTTP URL and convert it to HTTPS, then issue a redirect response to the user ...


3

Your DNS has two IP addresses specified for your site. Only one of the two has a server with properly configured security certificates. When you have two A records for the same host name, it is known as "round robin" DNS. Clients will randomly try to connect to one or the other. Some modern browsers may try both of them to see which works, which may be ...


3

The source of the file (at https://github.com/certbot/certbot/blob/master/certbot-auto like Stephen wrote) clearly shows: Download and run the latest release version of the Certbot client. certbot-auto is a wrapper around certbot, as explained later in comments: USAGE="Usage: $BASENAME [OPTIONS] A self-updating wrapper script for the Certbot ACME ...


2

You need to tell Google that your new domain name is your canonical domain name for the content on the site, otherwise Google won’t index the new domain since it is duplicating content. You can move to a new domain name by using 301 redirects from each page available on the old domain to the equivalent URL with the new domain. (Implementation of this ...


2

I had the same problem. On the Settings->General page, there are two fields, "WordPress Address (URL)" and "Site Address (URL)", that had http in them instead of https. I update those fields and the problem went away.


2

I would say this depends on what is going on the website along with your ability to implement the solution, also whether you have subdomains. Gauging by your question, you seem to have the ability to do any of the solutions. Your websites content. I would suggest using a paid SSL if you are an e-commerce site or is a multi-site. Mainly due to the warranty ...


2

HTTP redirects happen AFTER the TLS handshake. For the TLS handshake to be successful, the server has to present a valid certificate, having in it the hostname that is in the URL being accessed, otherwise browsers will show errors. So the rule is simple: as soon as you see an https:// URL, even if all accesses to it are finally redirected to another URL, ...


2

Nginx is a reverse proxy in your example, which means it terminates the HTTP exchange. Clients do not know that there is anything after Nginx, for them, Nginx is the webserver and the source of the response. As such the TLS handshake will also finish at Nginx and hence Nginx needs to have the server certificate and associated key to be able to properly set ...


2

When browsing to my external IP using 4g (by phone), I am entering the router configuration page. When doing the exact same over wifi (by laptop), I enter the site, as intended. It sounds like you have enabled the router config page to be accessed both internally and externally. External access to the config is a very bad idea and is most likely on the ...


2

I resolved the issue. The solution is really simple but worked for me. What I did is, as I was using Amazon and flipkart static banners, I downloaded those banners and uploaded them to my website and linked them with my https affiliate link. Because the issue was with banners only which were served over http, as I checked the code provided by them.


2

On May 18th you changed your nameservers from: ns10.nationbuilder.com ns11.nationbuilder.com ns12.nationbuilder.com ns13.nationbuilder.com ns14.nationbuilder.com ns15.nationbuilder.com to: ns41.domaincontrol.com ns42.domaincontrol.com Old nameservers resolve your name as: ;; ANSWER SECTION: davidkim2020.com. 2h40m IN A 96.45.82.241 davidkim2020.com. ...


2

As NuTTyX as said your name is in the SAN section. You can see it quickly that way: $ openssl s_client -connect copyurls.ml:443 -servername copyurls.ml -showcerts </dev/null |& grep -A100 'BEGIN CERTIFICATE' | grep -B100 'END CERTIFICATE' | openssl x509 -text -noout |& grep -A1 'X509v3 Subject Alternative Name' X509v3 Subject ...


2

Security Changing the links to HTTPS prevents a class of attacks against your users. When a user clicks off your site with a HTTP link, that request could easily be intercepted and changed. Instead of getting a 301 redirect to HTTPS, the attacker could instead feed malicious content to the user. Linking directly to the HTTPS site prevents that type of ...


1

Certificates can be issued for "Subject Alternative Names" (that is, more names that certificate is valid for) which covers your hostname (I've just checked that it covers both your domain and any subdomain). Also, consider that when you censor your browser's navigation bar, the title of the tab still shows the domain name and should be censored as ...


1

What is the relationship between letsencrypt and DANE TLSA? None in particular, and at least nothing different from any other CA and DANE. Why do you think there would be a specific relationship? Can or should letsencrypt be used together with DANE TLSA? You can, but should you, that is a lot of another matter, and you are giving no details on your ...


1

The requirement for an SSL certificate is determined by the domain you're redirecting from, as that's the domain that will be serving up the redirect itself. In short, the server behind your "from" domain needs to have a valid SSL certificate to serve up a redirect from https. If you're using a "redirecting service" like the "domain forwarding" option ...


1

Turns out it was the global ServerName setting... why that should have any effect, especially considering that it shouldn't be used in the first place since http doesn't have any concept of or use for a "server name" when using virtual-host settings with SNI and the HTTP host header... Just replace ServerName domainA.com:80 with ServerName why-are-you-even-...


1

...on each htaccess of each subfolder By the sounds of it, your subdomains point to subdirectories off the main domain's document root. Bear in mind that in this scenario the root .htaccess file can influence the config of the subdomains. This can be good and bad. Although having an entirely separate WordPress install in the root is probably not recommended....


1

I got it to work: all I needed to do was take another image and rename it to the same image as my buggy image and save it. I don't know how or why it worked, but it did.


1

If you don't have a valid SSL certificate, then it's not possible to redirect HTTPS to HTTP without a warning. To properly issue the redirect, the site needs to have a valid SSL certificate. And if the site has a valid SSL certificate, then at that point it usually makes more sense to just serve the site over HTTPS.


1

It sounds like you may have put the directives in the wrong place in your .htaccess file. The HTTP to HTTPS redirect needs to go near the top, before any other rewrites. The nature of your URLs suggest you are using a front-controller type pattern and rewriting requests to a common script. However, the "homepage" does not need to be rewritten (since mod_dir ...


1

The HTTPS version displays the security warning of course (as there is no SSL certificate) and then a 404 if you go past that. If you get a "security warning" that you are able to bypass then the server is listening on port 443 and there is a security certificate installed but for a different domain/hostname. When you bypass this invalid certificate then ...


1

There is a plugin for WordPress called SSL Insecure Content Fixer that will automatically change any calls to content from http to https. You can also use a find-and-replace plugin or use wp-cli to do a database-wide search for "http:" and replace it with "https:" but you run the risk of breaking links to sites that do not have SSL enabled.


1

If you have a secure page (HTML delivered via HTTPS) that calls an image or any resource from a source that is not secure, the page will now be considered overall not secure. ... Mixed content affects the way your webpage is displayed by browsers. WordPress stores the full image URL in its post database. So after turning the website to HTTPS, you have to ...


1

You use NS records to connect your domain name registrar to your DNS host. You use A and CNAME records to at your DNS host to connect your domain name to the IP address of your web host. You could have: Domain.com -> NS ns1.hostinger.com -> A 1.1.1.1 Or you could have: Domain.com -> NS ns1.domain.com -> A 1.1.1.1 In this case both your ...


1

https://www.bybe.net/cloudflare-enforce-ssl-redirect-http-https/ has the full details. To redirect to HTTPS, you need add a "Page Rule" for http://*example.com/* with the "Always Use HTTPS" option from the settings. To redirect to www you need three "Page Rules": http://example.com/* -> https://www.example.com/$1 https://example.com/* -> https://www....


1

The SSL/TLS Handshake happens immediately after the TCP Handshake. During SSL/TLS Handshake, the Web Server has to provide its SSL/TLS x.509 certificate to the client.The client matches current domain name or IP address in its request against the Certificate Subject Name and Certificate Subject Alternative Names in the provided SSL/TLS x.509 Certificate of ...


1

Cloudflare is a free solution for redirecting your alternate domains with HTTPS support. Here are detailed instructions for setting it up: Visit Cloudflare Create an account and verify your email address Use the "add a site" feature to add your alternate domain under their free plan. If you are creating an account, it should ask you to do this as a step ...


Only top voted, non community-wiki answers of a minimum length are eligible