HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

learn more… | top users | synonyms

1
vote
1answer
135 views

What specific sequence of events can cause “SSL_ERROR_RX_UNEXPECTED_SERVER_HELLO” in Firefox?

I have a user that was visiting a site and received the following error in FireFox: Secure Connection Failed An error occurred during the connection to foo.foo2.com. SSL received an unexpected ...
-2
votes
1answer
219 views

Why not https everywhere? [closed]

So https is supposed to be safer than http (encrypted), why is https then not used everywhere? Would it not make the web a more safe place? What could be the reason that https is not implemented when ...
2
votes
1answer
598 views

SSL Redirect in VirtualHost causing url to break

I recently configured by website to direct all traffic through https. I did this by modifying the vhost file to show this <VirtualHost *:80> DocumentRoot "/srv/http/example" ServerName ...
1
vote
1answer
164 views

Difference between DNS and /etc/hosts in name resolving during an HTTPS request

My question is: what is the difference between DNS and the static resolution method based on /etc/hosts in name resolving during an HTTPS connection? In order to connect to a site using https the ...
1
vote
2answers
742 views

HTTPs sites won't load CSS in any browser

Whenever I try to load a https website, the CSS stylesheet for the site won't load. I've looked around for answers, and apparently fixing the system time can resolve the problem but, as far as I can ...
0
votes
1answer
286 views

Virtual hosting with nginx over SSL, without SNI (via a wildcard cert)

I'm trying to get https://survey.mediacru.sh to work without SNI. We have a wildcard cert and are using nginx as our http server. However, on browsers without SNI support (for example, the stock ...
2
votes
0answers
541 views

Disabling TLS protocols for https:// URLs in git

Since my update to Ubuntu 14.04, I cannot connect to the companies git server. It uses https with the SSL protocols only. When running git clone (or any other git command that connects to the server) ...
2
votes
2answers
828 views

How to add a self-signed certificate to Firefox besides adding it as a CA?

Since it's not a wise thing to add a self-signed HTTPS cert as a CA to Firefox, my question is: How can I add a self-signed certificate to Mozilla Firefox? (not as a CA). So that I will not be warned ...
1
vote
2answers
420 views

Downloaded a Firefox Addon on addons.mozilla.COM. Ignored Untrusted Certificate. Should I worry?

This site: https://en-us.add-ons.mozilla.com has an untrusted certificate. (At least with my browser: Iceweasel 24.2.0) I find that highly suspicious. But I do not know enough about such ...
0
votes
0answers
356 views

Why is SSL broken for one domain on one computer?

I've been having a strange issue, where I cannot connect to https://www.humblebundle.com. Plain HTTP works fine, as does https://humblebundle.com. These all redirect to the above address. I haven't ...
1
vote
1answer
51 views

Does Heartbleed pose a risk for past HTTPS communications?

Heartbleed exposes a threat where computer memory for a vulnerable could be exposed. Consider an adversary with access to all cipher text input and output of your server (ISP, government, local ...
3
votes
1answer
3k views

Does Heartbleed Bug in OpenSSL affect ALL SSL certs

Does the Heartbleed Bug in OpenSSL affect ALL SSL certs, regardless of where I purchased or if I self-cert? For example, if I bought an SSL certificate from GoDaddy and set this up on my server ...
0
votes
0answers
208 views

Nginx/SNI: Return 444 if there's no certificate available for a specific domain hosted on the same IP

I'm stuck with configuring nginx regarding SSL and SNI support. In order to simplify my case let's say I have two domains, foo.com and bar.com. I have only one IP and both domains are mapped to this ...
0
votes
1answer
271 views

Intercept HTTPS traffic of a IP energy consumption monitor device

I have this device connected to my home network, and I'm curious about what it's sending to the Internet. It seems to generate a lot of traffic. I've connected it to my laptop and I've shared the ...
0
votes
1answer
46 views

How do you force a browser out of https

I have a website that only has a couple of webpages that need to be secure. I'm not have a problem forcing the browser into https on those pages, but I am having difficulty returning back to http ...
3
votes
1answer
1k views

How to prevent Firefox from being redirected to https?

At work, the net admin. has completely blocked HTTPS for everyone save a few bosses. He claims that way he can be sure no-one is using a proxy, tunnel, etc. to access Facebook, Youtube or other sites ...
1
vote
0answers
255 views

Can not access any site with Chrome but Chromium does access any site well at the same time

I'm in for trouble with Chrome on my Mac after I backed to my home. The problem is I can not access the site such https://www.google.com with error code "ERR_ACCESS_DENIED". Even It's not restricted ...
0
votes
0answers
125 views

Firefox 27 wants to use HTTPS everywhere

I've got a weird problem with my Firefox 27.0.1: Literally any webpage I want to visit is automatically requested via HTTPS, and that means I constantly get "Untrusted Connection" warnings - see first ...
0
votes
1answer
75 views

ssh trough HTTPS without a proxy

Is it possible to ssh trough HTTPS without a proxy? using normal tools, something like ThinVNC does The network is closed from the outside world, only access to websites is allowed, and that's only ...
0
votes
1answer
51 views

What details would you view in a certificate to check if it is trustworthy?

I have a question need help: What details would you view in a certificate to check if it is a trustworthy website?
0
votes
0answers
1k views

Why the indicator for https condition at left side of URL bar alerted in yellow

Why the indicator for https condition at left side of URL bar alerted in yellow I would like to know why the indicator for https condition at left side of URL bar alerted in yellow even when I just ...
1
vote
1answer
24 views

What is the proper handling of an SSL request where SSL is not enabled?

Quick question. I have a server I am managing which does NOT use https. When I attempt to go to the website with an https url, I get a bizzarre error which is the result of the fact that I have more ...
5
votes
2answers
10k views

“Cannot connect to the real Gmail.com”

Dunno what happened, but suddenly I cannot connect to Gmail from Chrome on this computer: Under "more" it says: What does this mean? gmail.com normally uses encryption (SSL) to protect ...
0
votes
0answers
768 views

HTTPS doesn't work with Chrome

I have problem similar to this: HTTPS connections fail with Chrome. For a long time my Google Chrome browser worked perfectly, but yesterday something happened, and I can't open any of https sites. I ...
0
votes
1answer
153 views

authentication for git remote push to github

Github says they prefer https over ssh. Does this mean I should do something like this on my local machine: git romote add github 'https://userid:passwd@github.com/userid/repo.git' If so is sending ...
0
votes
2answers
699 views

Access HTTPS URL from command prompt in Windows

I have an update URL that I need to access. It has all the parameters in the URL to do its job. I don't need to see it in the browser nor do I need its contents to be saved. Is there a program that ...
0
votes
1answer
2k views

how to disable TLS 1.0 and checking enabling SSl 3.0 in Firefox 27.0.1?

How to disable TLS 1.0 and checking enabling SSL 3.0 in Firefox 27.0.1 (new Version) ? I suppose I can find it at the Encryption tab. I followed below path Tools -> Options -> Advanced but there ...
0
votes
1answer
382 views

scramble https over http to avoid detection by Firewall

My campus has recently installed Fortigate Firewall and have started spoofing https certs. eg. Certificates appear to be invalid saying: "Google.com; verified by Fortinet CA" Is there a way to ...
1
vote
2answers
2k views

bower package installation issues with git / https

Here is my OS: (But installed in my laptop using VM - Virtualbox via vagrant) Distributor ID: Ubuntu Description: Ubuntu 12.04.4 LTS Release: 12.04 Codename: precise The problem I am facing is that ...
1
vote
3answers
307 views

Serve all content via HTTPS, regardless of web server settings

I've got a server running on port 80 on a Mac. I'd like to also have the same content that's being served on port 80 available on port 443. I'd like to know if there's a command line way or an easy ...
0
votes
1answer
154 views

Can not access a certain HTTPS domain. Very weird issue

I'm having a very weird issue with a certain HTTPS site. I have no crazy network setup or firewalls. Just computers behind a cable modem. I feel dumb but I can't figure it out for the life of me. ...
5
votes
2answers
3k views

Prevent Internet Explorer from caching SSL client certificates

I use a particular HTTPS website, but I have to separate client certificates that I use to authenticate (sometimes I use one account, which requires certificate A and sometimes a different one, which ...
1
vote
1answer
256 views

Cisco router https warning

My web browser displays a warning when I try and login to a cisco router. The https certificate is untrusted and I am asked whether to proceed anyway. How do I make this warning go away? It happens ...
1
vote
0answers
2k views

Chrome and Outlook can only make secure connections when user account has admin privileges

I have a co-worker who is set up as an admin user under Win XP SP3 and I'm trying to switch her to being a restricted user. The short story is that when I switch her account to restricted, Chrome ...
0
votes
2answers
43 views

tunnel http over https

I am sitting in an japanese appartment and this weird appartment company needs a username and password to enter the internet (It's a .htaccess like dialog). I cant get this username and password but ...
1
vote
1answer
23 views

// Vs http:// when including remote content

My website content is served over SSL and my webpage uses Google Adsense. In The ad code the javascript file is included from: //pagead2.googlesyndication.com/pagead/js/adsbygoogle.js I would just ...
2
votes
2answers
2k views

I set my router to only allow access through HTTPS, and now I can't access it. Can I fix this without resetting the router completely?

I have a Linksys E1000 router that I access through http://192.168.1.1. I set it to only allow access through HTTPS, and now when I try to access it through the web interface at https://192.168.1.1 in ...
0
votes
1answer
143 views

can a hacked DNS make a fake certificate seem legitimate?

I'm doing some traveling right now, so I've been doing a lot of reading about secure browsing on unprotected public networks. My understanding is that if you're using HTTPS and your browser indicates ...
0
votes
1answer
80 views

Why are websites suddenly not secure?

Firefox updated today, without asking me. The update went well, and browsing works fine, with one exception- Websites are suddenly not providing any identity credentials. DeviantART, Lumosity, ...
0
votes
2answers
39 views

How can I tell if an HTTP Request is forwarded to a secure server?

If I see a login form that's not using HTTPS (it only diplays http:// in the URL) how can I determine if this request is forwarded to a secure server?
1
vote
0answers
129 views

Apache configured for HSTS, but SSLLabs/Chrome not acknowledging

I'm setting up a webserver and I've been checking it against SSLLabs and Chrome 31 to make sure the security is up to snuff. However neither Chrome nor SSLLabs seems to believe that strict transport ...
2
votes
1answer
65 views

Will the browser ask the Certificate Authorities each time I visit some HTTPS?

I have basic ideas of how asymmetric encryption works. I as to HTTPS, all articles makes me confusing. I want to know: Will the browser ask the Certificate Authorities each time I visit some ...
0
votes
2answers
213 views

How can I tell whether PFS is enabled?

I have kinda 2 questions.. first, is this setting considered "secure" ? Second, how do I tell whether perfect forward secrecy is enabled? ssl_session_timeout 5m; ssl_protocols TLSv1 ...
2
votes
1answer
2k views

How to redirect YouTube's videos URL (googlevideo.com) from http to https automatically?

I want to redirect http urls in youtube videos to https. youtube's videos are from googlevideo.com so I want to use https instead of http http://r8---sn-qxau5-btqs.googlevideo.com... to ...
0
votes
0answers
62 views

All https requests are goes as TLS (windows 7 64bit)

I have installed a version of windows 7 64bit on my laptop. After it all software that are going to send request to https has failed because the OS are using TLS instead of SSL3. I find it because all ...
0
votes
0answers
442 views

Rails 2 and Ngnix: https pages can't load css or js (but will load graphics)

ADMISSION: i've posted this same question on stackoverflow, before realising it's probabaly better suited to superuser, but it kind of depends on the answer: If it turns out to be a problem in my ...
1
vote
0answers
389 views

Windows 7 has an https timeout — how can I turn it off?

I seem to have some sort of https time-out problem with browsers in Windows 7. Windows 7 seemed to work just fine until a few weeks ago, when (among other things) I installed Windows EMET. Stupid me. ...
1
vote
0answers
206 views

How to capture HTTPS traffic with Fiddler2 on Windows 8? Unable to generate certificate

How to capture HTTPS traffic with Fiddler2 on Windows 8? While trying to capture HTTPS traffic under Windows 8 I get permanent messages "Unable to Generate Certificate" while browsing: ...
0
votes
1answer
455 views

Multiple websites on one server/IP; only one with SSL

I recently acquired an SSL certificate for my primary site (https://wemarsh.com/). It works great, and I've even set up an .htaccess rule so all traffic on that site is encrypted. (I'm running ...
0
votes
1answer
270 views

Intermediate SSL Cert

I have an SSL certificate that is self-signed, and therefore uses an intermediate certificate. I am using Node.js and returning both the certificate as well as the certificate chain which includes ...