HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

learn more… | top users | synonyms

1
vote
1answer
217 views

Untrusted connection error on Chrome and Firefox when opening HTTPS websites

Since a few days ago - I believe it started after the Daylight Saving Time change - I can't open websites that use HTTPS connections, such as Yahoo, Facebook and Youtube, on Chrome or Mozilla Firefox. ...
0
votes
0answers
32 views

Root HTTPS request to HTTP for internal use

My configuration consists on two virtual machines (both CentOs 6) VM_A: Application server VM_B: Proxy server with squid The setup for my test How can I root https request to http request for ...
0
votes
1answer
59 views

Google domain name HTTPS errors on single router only

Every time I browse to google.com or my local google (google.com.sg), I get an HTTPS error which on Chrome is ERR_CERT_COMMON_NAME_INVALID. The certificate that is returned appears to be for the ...
0
votes
0answers
83 views

Local site with IIS Express Development Certificate takes long to connect

I'm running a local site with an IIS Express Development Certificate: When I use Chrome to connect to my local site https://www.example.com the Chrome taskbar keeps showing connecting...: Only ...
0
votes
1answer
325 views

Cannot open port 443 on modem

I'm developing a website, which requires an https connection because of the login system. I opened my Tomcat's Connector on port 443 and connecting through https://localhost works well, but i need it ...
0
votes
1answer
46 views

SSL does not work

I am trying to add https to our url. Below is my config in httpd.conf. But when I type in the url with https, the server hangs are returns time out. The url works with http as before. HTTPS part is ...
1
vote
2answers
686 views

svn not accepting https/ssl certificate

When bettercodes.org disappeared in September, I moved my private repo over to https://subversion.assembla.com/. It's working great, except for the fact that I have to temporarily accept the ...
0
votes
0answers
20 views

Difference between JKS file and client certificates

I am accessing my partner URL using httpS. I was able to download the client certificates from Browser itself. However i got to know that it is not enough for us only to have the client certificates ...
1
vote
2answers
40 views

*buntu: https on apt-get [closed]

I recently searched on the web to know about https for apt-get and as far as I read there's no actual need, that at least is what a lot of people defend, for the use of it for this as it's always ...
0
votes
0answers
38 views

Enforce HTTPS for specific pages of a web application

I have a web application that works on both the HTTP and the HTTPS protocols. I want some of its pages (form pages) to work only on the HTTPS protocol. The web application was developed on the ASP....
0
votes
3answers
59 views

https certificates for 2 IP addresses on the same server

We are working on a router-like device which can have it’s own access point and be connected to another router. We want to have https on the management web page using a valid certificate (not a self-...
-2
votes
2answers
128 views

Is the data sent from web server to browser is really more secured in https than http?

I was just reading about the differences between http and https briefly. And what I have not understood is the following possible scenario: Everyone has SSL public key right? So, anyone can get the ...
0
votes
0answers
155 views

Using Cntlm & PuTTY to use http/https through SSH Tunnel

Forgive my grammar and my bad English. I'll try to explain as clearly and concisely as I can! This is an overview of the network topology I am facing: MyWorkstation → Transparent Proxy → Internet ...
0
votes
0answers
104 views

How to use WinHTTP logging to determine SSL/TLS level negotiated

I've enabled WinHTTP Logging but the log files don't give me the SSL/TLS level negotiated. "Using WinHTTP Logging to Verify SSL/TLS Negotiation" only discusses error responses. Can I only determine ...
0
votes
2answers
220 views

How can any “replace your DNS and watch netflix from another country” company work with HTTPS traffic?

There are many services like "unblock-us.com" that make it possible to use geo-restricted services from other countries. The setup is always the same: just replace DNS and that's it. My question is: ...
0
votes
1answer
42 views

How to untrust proxy or antivirus certificate and/or certificate authority?

I have antivirus inspecting my web traffic including HTTPs. In this question we discovered, that it installed it's self certificates or certificate authority (not sure about terminology). Now I wish ...
0
votes
1answer
510 views

How can Kaspersky embed code into web page accessed via HTTPs?

I have Kaspersky Internet Security (antivirus program) doing some security for me. Specifically, it checks links by it's database and marking it with green K signs. The question is: how it can be ...
1
vote
1answer
165 views

Is there a way to make Chrome assume a domain's certificate is valid (in other words, skip validating its certificate)?

Is there a way to make Chrome on Windows avoid validating the certificate for a domain such as (www.foo.com): Basically I want to avoid getting this warning message for that site every time I start ...
2
votes
1answer
671 views

How to test if a web-services client application supports TLS?

I have a client app that accesses an HTTPS web-service. It uses an external library for SSL support. The service provider has advised they are dropping SSL 3 support and, from a specific date, will ...
0
votes
1answer
62 views

every SSL certificate fails in chrome

I have downgraded from Windows 10 to Windows 7 today. Now EVERY time i call ANY https:// url in chrome, it tells me that the connection is not secure. My time settings are correct and the sites work ...
16
votes
4answers
48k views

Force Chrome to Ignore a "weak ephemeral Diffie-Hellman public key”

With the update of Chrome to v45, it's blocking access to pages with weak ephermeral Diffie-Hellman public keys. I understand that this is due to Logjam. I understand that switching from https to http ...
1
vote
0answers
470 views

Using Fiddler to sniff HTTPS requests of any process (Proxifier)

As far as I understand Fiddler, it simply listens on localhost:8888 and changes the windows proxy settings to exactly that. So that every application that connects using that proxy sends the data ...
0
votes
0answers
208 views

HTTP/1.1 401 Unauthorized when using XML-RPC PHP client and server

HTTP/1.1 401 Unauthorized This server could not verify that you are authorized to access the document you requested. Either you supplied the wrong credentials (e.g., bad password), or your browser ...
0
votes
0answers
17 views

mod_header for Host Public Key Pinning?

I'm trying to configure Apache to write the Host Public Key Pinning Header (a.k.a Public Key Pinning Extension for HTTP or HPKP). I'm in the Apache docs at Apache Module mod_headers, but I can't ...
0
votes
0answers
261 views

Safari won't open a URL with special utf8 characters over https, but http works fine

My https switch is almost complete. Everything works flawlessly on every browser except Safari (both iOS and OSX). Some URLs contain Polish characters, such as żźćąłóń. Apparently in some cases ...
1
vote
1answer
107 views

Same SSL Cert on 2 Servers, 1 Passes & Other Doesn't

I run a few small sites, and last year installed SSL certificates on each of them. Last week a visitor contacted me with a question about my SSL certificate, which prompted me to run a couple of SSL ...
0
votes
0answers
401 views

Install self-signed SSL certificate correctly (for use in Node.js)

I've been trying to create a self-signed certificate, use it in a simple Node.js server, and install it into the system to the system trusted. However, something is not working, the 'SSL certificate ...
1
vote
1answer
42 views

Make Firefox warn before allowing user to visit non-HTTPS website

I want to avoid accidentally visiting websites served over unencrypted HTTP. How can I configure Firefox so that it will warn me if I attempt to visit such a site? Ideally: this shouldn't need an ...
3
votes
1answer
4k views

Suppress Google Chrome's “Your Connection is Not Private” for specific Address?

We have an internal website (behind our VPN) which uses https/ssl. Every time I visit it, I get this error message: Your connection is not private Attackers might be trying to steal your ...
0
votes
1answer
402 views

Firefox - any way to override Server Name Indication for troubleshooting?

I use firefox extensively to access and troubleshoot a myriad of webapps, many of them running on apache virtualhost'ed environments. One problem I've been having is that on SSL-enabled servers I can'...
0
votes
0answers
227 views

How do I fan-out HTTP requests with a HTTPS/SNI proxy?

Let's say my HTTPS server gets contacted with the SNI hostname 200.100.2.1.myhost.com. I wish to read the SNI hostname, and depending on the hostname, forward to the IP address from the beginning from ...
1
vote
2answers
471 views

How redirect to HTTPS using DNS server?

I use the openDNS servers : 208.67.222.123 / 208.67.220.123 as DNS provider for my PC. When I go to an inappropriate http:// (adult content), I got redirected to https:// open dns site. I just ...
0
votes
1answer
927 views

Windows hosts: how can I redirect HTTPS site?

I have the following in my C:\Windows\System32\drivers\etc\hosts: 127.0.0.1 example.com It works when I use: http://example.com But does not work when I use: https://example.com, which gives error ...
0
votes
0answers
9 views

Securing email on the routeemail

I know that most emails use ssl but i wonder what happens with my email while it is in transit for example on the route to recipient there are many email servers and is ssh used on each hop? I believe ...
0
votes
1answer
196 views

Where does Firefox get the HSTS information from?

I have a local server serving HTTPS using a self-signed certificate. It does not serve http. The certificate is issued with cn=host1.subdomain1.domain1. The server is reachable under name host2, too. ...
0
votes
0answers
309 views

Chrome suddenly red HTTPS on mobile but not on desktop

Yesterday I enabled OCSP stapling for my website in nginx. Now when I check my website using Qualys SSL Labs I have 2 trust paths, 1 using a SHA1 root certificate and 1 using a SHA256 root ...
0
votes
1answer
149 views

Why would Chrome rewrite links within pages from the http:// to https:// scheme?

I'm completely stumped with this issue: When visiting a website which is a virtual host, without SSL support and with no reference to any https:// scheme within its database, or any file within it's ...
14
votes
4answers
4k views

Chrome adds weird HTTPS:1 header to all requests

I've been getting a lot of weird errors on websites that relate to HTTPS. These sites works great in FF and IE, but fail to load in Chrome. It appears that though I'm requesting an unsecured URL (http)...
-2
votes
1answer
191 views

Redirect Https requests?

Being a noob for such considerations, please dont hit me... I have redirection from many domains --to--> a unique landing page of my server. This works painlessly for http Here is my question : ...
1
vote
1answer
95 views

How HTTPs proxies can detect HTTPs packets?

I know the theory about proxies, what they are and their purposes. Sometimes, HTTP(s) proxies are used within a company to filter outgoing network, for example, to prevent anything but HTTP/HTTPs. I ...
0
votes
1answer
319 views

Website “unsafe” on Chrome and other browsers

I recently switches to HTTPS with a free certificate from WoSign (https://buy.wosign.com/free/ definitely recommend it because it provides free SSL for up to 3 year and free renewal and multiple ...
0
votes
0answers
152 views

Is it possible to export a pcap / pcapng from fiddler?

And, if so, how? (For my purposes, I don't actually need any protocol information below the application layer, but the tools which work with pcaps provide some useful functionality.)
1
vote
0answers
12 views

Can I view remote HTTP directories via something like sshfs?

It's possible to mount remote directories via sshfs, if you have the correct login credentials to connect via ssh. I've also seen many websites with the 'autoindex' functionality (e.g. here and here)....
3
votes
1answer
144 views

Why does firefox send TCP packets even when idle?

I run firefox on Debian. I made a clean install with no cookies, or no information input from my side. I've also disabled all mumboo-jumboo healthy and crash report tracking. I've disabled 'shared ...
1
vote
0answers
191 views

HTTP/2 has much higher TTFB than HTTP/1.1

Has anyone else experience this issue with HTTP/2 on IIS10. I have a VM set up on Azure with a Website on IIS10. I've set up SSL etc. and tested the site on HTTP/2, turned off SSL and tested it on ...
0
votes
2answers
2k views

Apache http to https redirect with Rewrite

Using Apache 2.4 on OS X Yosemite. Need to modify this virtual host for it to redirect http://server.kibana and http://www.server.kibana to https://server.kibana Here is the Vhost: <VirtualHost *:...
5
votes
4answers
2k views

Is it safe to register on an HTTP webpage when I am using VPN?

I only register (make an account/login stuff) on HTTPS webpages. However, a webpage I wanted to register right now doesn't use HTTPS. I am wondering if I am connected to my company VPN, is it safe to ...
0
votes
0answers
10k views

Google Chrome gives ERR_ADDRESS_UNREACHABLE error for HTTPS page (site is perfectly reachable via curl)

A otherwise perfectly working Chrome browser gives an ERR_ADDRESS_UNREACHABLE error for a request to a https page on port 8443. The page is reachable via curl, Firefox, Safari.. How would I go about ...
7
votes
3answers
11k views

How to troubleshoot “Secure Connection Failed” in Firefox appearing since the version 38?

Since I upgraded Firefox to the version 38 I encounter problem while sending a certain form on the website https://usercenter.checkpoint.com/ Most of the website works normally but sending a form ...
-2
votes
2answers
113 views

What type of information does HTTPs make private from an ISP? [duplicate]

How private is HTTPs to an ISP? For example, Can my ISP know the entire URL (Not only the domain) while connecting to a website with HTTPs? Can my ISP see images loaded through a website connected to ...