Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [https]

HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

HTTPS connections are often used for payment transactions and for sensitive transactions in corporate systems. They are increasingly being used for social networking sites like Facebook and Twitter to help prevent identity theft etc.

HTTPS on Wikipedia

2545 questions
39
votes
5 answers

Redirect https to another https

I've been Googling for this question, and ironically annoyingly I can't find a concrete answer. I've answered this question myself in the past, and now I can't remember my own explanation. Several times a year, someone will ask me to do this. I'd…
Stefan Lasiewski
  • 23,975
  • 42
  • 135
  • 187
7
votes
4 answers

Why did HTTPS become the standard method instead of S-HTTP?

Why did HTTPS win? Does anyone know of any specific reasons why Netscape and Microsoft both choose HTTPS instead of S-HTTP (RFC 2660)? It appears to me that S-HTTP is more flexible and does not require a separate IP or port to serve the correct…
Rob Olmos
  • 2,240
4
votes
1 answer

Multiple HTTPS servers for single website, and single IP?

Suppose I have a TCP-level load balancer which passes TCP packets between one of two backend HTTPS servers, and the client. In order to ensure no problems with encryption, then the load balancer would have to maintain a table to ensure that X client…
700 Software
  • 2,273
4
votes
2 answers

HTTPS only website

Is it acceptable to run a website which only serves on HTTPS and not HTTP. Consider situations where plain domain names are typed in address bar. Usually websites redirect the user to the HTTPS version. There is a good reason for wanting to only…
Mansour
  • 499
3
votes
1 answer

What do I need to know when deploying a new SHA2 HTTPS certificate?

We are using SHA1 for now, and we are required to apply new HTTPS certificate which supports SHA2. Can I deploy SHA2 certificates directly to production environment? Do I need to test it? What problems will I encounter?
user3376741
  • 51
3
votes
3 answers

Force browser to send first request via HTTPS if user access the page through HTTP

Some time ago i had found a possibility to prevent the browser to establish any unsecured connections to a server. I already redirect my users from HTTP to HTTPS but if a user sends a Request with sensitive data to http first and gets a redirect to…
Maximilian Ruta
  • 153
2
votes
2 answers

Is it possible to disable HSTS redirection programmatically?

Situation: site, supporting both HTTP and HTTPS. HSTS has been enabled. Powered by Apache 2.2. Later, the site owner decides to only use HTTPS on certain pages (registration, orders etc.). However, the .htaccess redirection fails, since many site…
Konstantin Boyandin
  • 293
2
votes
3 answers

HTTPS with port 443

HI There, I want to convert my whole website from HTTP to HTTPS , here are some questions should we have both 80 and 443 open when i access https://mypage.mydomain.com does the traffic come to 80 or 443 does all the browsers accessing HTTPS…
DEE
1
vote
1 answer

HTTPS with port number not able to access

I face the issue below. www.abc.com:10181 - can't access the webpage https:\www.abc.com:10181 - able to access the webpage I need to manually key in the "https://", if not there will not able to view the webpage. Thanks.
JiaXiang Low
  • 11
1
vote
2 answers

How to run two different websites in the same domain one with HTTP and the other with HTTPS?

In an older Stackoverflow thread (https://stackoverflow.com/questions/20450676/will-using-http-and-https-on-the-same-domain-affect-seo) I learned that you can run two different websites from the same domain one with an HTTP protocol and the other…
Tim Magee
  • 11
  • 2
1
vote
2 answers

Apache: https without www

I'm getting error message when typing https without www. For example: https://glossyhome.com returns "cannot reach this page" error. However all other combinations: "https with www", "http without www" and "http with www" all work fine. All traffic…
Roman
  • 11
1
vote
2 answers

How to implement the HTTPS protocol between a web server and web browser?

What are the requirements to implement the HTTPS protocol? I know that I need an HTTPS server that contains a certificate. Please guide me to implement HTTPS.
simplyblue
  • 113
  • 1
  • 5
0
votes
1 answer

Appengine default service https is not working

https://vikas-tradeassist.appspot.com -- not working http://vikas-tradeassist.appspot.com -- working fine can you please help me how I can resolve this, not sure why AppEngine traffic is not flowing through https for nodejs application. It worked…
Vikas Putcha
  • 1
0
votes
2 answers

Redirect from http://example.org to https://www.example.org directly or not?

Simply: Should I redirect http://example.org -> https://www.example.org http://example.org -> https://example.org -> https://www.example.org http://example.org -> http://www.example.org -> https://www.example.org Does it matter? Im' using HSTS.
Lenne
  • 997
0
votes
3 answers

Does a web server know the total file size when a website visitor uses the file upload box?

A client wants to allow file upload capability on their website for any files up to 1GB in size. When an HTTP POST request is sent by the site visitor does the server know the file size [content-length] sent at the start of the request or does it…
Lid
  • 15
  • 5
1
2