HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

learn more… | top users | synonyms

0
votes
0answers
11 views

Using Fiddler to sniff HTTPS requests of any process (Proxifier)

As far as I understand Fiddler, it simply listens on localhost:8888 and changes the windows proxy settings to exactly that. So that every application that connects using that proxy sends the data ...
0
votes
0answers
11 views

HTTP/1.1 401 Unauthorized when using XML-RPC PHP client and server

HTTP/1.1 401 Unauthorized This server could not verify that you are authorized to access the document you requested. Either you supplied the wrong credentials (e.g., bad password), or your browser ...
0
votes
0answers
2 views

mod_header for Host Public Key Pinning?

I'm trying to configure Apache to write the Host Public Key Pinning Header (a.k.a Public Key Pinning Extension for HTTP or HPKP). I'm in the Apache docs at Apache Module mod_headers, but I can't ...
0
votes
0answers
15 views

Safari won't open a URL with special utf8 characters over https, but http works fine

My https switch is almost complete. Everything works flawlessly on every browser except Safari (both iOS and OSX). Some URLs contain Polish characters, such as żźćąłóń. Apparently in some cases ...
1
vote
1answer
82 views

Same SSL Cert on 2 Servers, 1 Passes & Other Doesn't

I run a few small sites, and last year installed SSL certificates on each of them. Last week a visitor contacted me with a question about my SSL certificate, which prompted me to run a couple of SSL ...
2
votes
1answer
3k views

How to redirect YouTube's videos URL (googlevideo.com) from http to https automatically?

I want to redirect http urls in youtube videos to https. youtube's videos are from googlevideo.com so I want to use https instead of http http://r8---sn-qxau5-btqs.googlevideo.com... to ...
3
votes
1answer
5k views

Firefox, error when accessing https url

I'm connected through a public wifi hotspot. No problem when using IExplorer. When I use Firefox, I obtain the following error message after asking for any https url, as for example ...
1
vote
1answer
30 views

Make Firefox warn before allowing user to visit non-HTTPS website

I want to avoid accidentally visiting websites served over unencrypted HTTP. How can I configure Firefox so that it will warn me if I attempt to visit such a site? Ideally: this shouldn't need an ...
0
votes
0answers
37 views

Install self-signed SSL certificate correctly (for use in Node.js)

I've been trying to create a self-signed certificate, use it in a simple Node.js server, and install it into the system to the system trusted. However, something is not working, the 'SSL certificate ...
1
vote
4answers
3k views

I'm receiving an SSL error in various browsers, but I can't find non-SSL content

I'm receiving an error with my SSL connection. Using google chrome I see the following error: Your connection is encrypted with 128-bit encryption ... however this page includes other ...
0
votes
0answers
232 views

Tomcat6 - SSL received a record that exceeded the maximum permissible length

After following the instructions to setup a secure http connection on my tomcat server (link: https://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html), I had this error pop up when I requested ...
2
votes
1answer
147 views

Suppress Google Chrome's “Your Connection is Not Private” for specific Address?

We have an internal website (behind our VPN) which uses https/ssl. Every time I visit it, I get this error message: Your connection is not private Attackers might be trying to steal your ...
8
votes
1answer
6k views

Why a listen 443 default_server; nginx rule override already configured rule (http rules working normal way)?

I have an nginx and different subdomains: a.mydomain.com b.mydomain.com c.mydomain.com Nginx has 4 rules: 1) rewrite rule: server { listen 80 server_name gl.udesk.org; root /nowhere; ...
0
votes
1answer
23 views

Firefox - any way to override Server Name Indication for troubleshooting?

I use firefox extensively to access and troubleshoot a myriad of webapps, many of them running on apache virtualhost'ed environments. One problem I've been having is that on SSL-enabled servers I ...
8
votes
1answer
2k views

All https sites have expired certificates

Suddenly all https sites have expired certificates on all browsers, even formatting and reinstalling Windows didn't work! I tried many different connections as well.
0
votes
0answers
12 views

How do I fan-out HTTP requests with a HTTPS/SNI proxy?

Let's say my HTTPS server gets contacted with the SNI hostname 200.100.2.1.myhost.com. I wish to read the SNI hostname, and depending on the hostname, forward to the IP address from the beginning from ...
1
vote
2answers
57 views

How redirect to HTTPS using DNS server?

I use the openDNS servers : 208.67.222.123 / 208.67.220.123 as DNS provider for my PC. When I go to an inappropriate http:// (adult content), I got redirected to https:// open dns site. I just ...
0
votes
1answer
49 views

Windows hosts: how can I redirect HTTPS site?

I have the following in my C:\Windows\System32\drivers\etc\hosts: 127.0.0.1 example.com It works when I use: http://example.com But does not work when I use: https://example.com, which gives error ...
44
votes
3answers
8k views

Firefox “Untrusted Connection” warnings when visiting reputable HTTPS sites when using child's account

When using Firefox on Windows, I see an "Untrusted Connection" warning when visiting any HTTPS site, including very reputable ones such as https://www.google.com and https://search.yahoo.com. The ...
6
votes
2answers
219 views

Why might a browser sometimes ask for confirmation when going to an HTTPS page?

When I click on a link to an HTTPS link, the browser will sometimes ask for confirmation or channel me though a form before it will allow me to se the page. Why would it do this? (This question ...
8
votes
3answers
3k views

Why are email transfers between mail servers often not encrypted?

Users can often choose if they want to access their email provider (such as Gmail) using a secure channel (e.g. using HTTPS). However, to the best of my knowledge, when it comes to ...
0
votes
0answers
9 views

Securing email on the routeemail

I know that most emails use ssl but i wonder what happens with my email while it is in transit for example on the route to recipient there are many email servers and is ssh used on each hop? I believe ...
8
votes
4answers
788 views

Chrome adds weird HTTPS:1 header to all requests

I've been getting a lot of weird errors on websites that relate to HTTPS. These sites works great in FF and IE, but fail to load in Chrome. It appears that though I'm requesting an unsecured URL ...
0
votes
1answer
34 views

Where does Firefox get the HSTS information from?

I have a local server serving HTTPS using a self-signed certificate. It does not serve http. The certificate is issued with cn=host1.subdomain1.domain1. The server is reachable under name host2, too. ...
0
votes
0answers
50 views

Chrome suddenly red HTTPS on mobile but not on desktop

Yesterday I enabled OCSP stapling for my website in nginx. Now when I check my website using Qualys SSL Labs I have 2 trust paths, 1 using a SHA1 root certificate and 1 using a SHA256 root ...
0
votes
1answer
89 views

Why would Chrome rewrite links within pages from the http:// to https:// scheme?

I'm completely stumped with this issue: When visiting a website which is a virtual host, without SSL support and with no reference to any https:// scheme within its database, or any file within it's ...
1
vote
2answers
2k views

bower package installation issues with git / https

Here is my OS: (But installed in my laptop using VM - Virtualbox via vagrant) Distributor ID: Ubuntu Description: Ubuntu 12.04.4 LTS Release: 12.04 Codename: precise The problem I am facing is that ...
2
votes
2answers
37 views

Complete location bar URL with https if the scheme is omitted

HTTP clients such as web browsers have been adding the http: scheme to URLs when the user enters example.com without being very specific. This will result in an request to http://example.com/. Is it ...
-2
votes
1answer
36 views

Redirect Https requests?

Being a noob for such considerations, please dont hit me... I have redirection from many domains --to--> a unique landing page of my server. This works painlessly for http Here is my question : ...
3
votes
1answer
66 views

Why does firefox send TCP packets even when idle?

I run firefox on Debian. I made a clean install with no cookies, or no information input from my side. I've also disabled all mumboo-jumboo healthy and crash report tracking. I've disabled 'shared ...
1
vote
3answers
125 views

My blog, under ssl

I want to have all my content from my blog distributed in a ssl encrypted connection (meaning, I want to go https) What are the drawbacks with respect to an unencrypted, "regular" http connection?
1
vote
1answer
44 views

How HTTPs proxies can detect HTTPs packets?

I know the theory about proxies, what they are and their purposes. Sometimes, HTTP(s) proxies are used within a company to filter outgoing network, for example, to prevent anything but HTTP/HTTPs. I ...
0
votes
1answer
61 views

Website “unsafe” on Chrome and other browsers

I recently switches to HTTPS with a free certificate from WoSign (https://buy.wosign.com/free/ definitely recommend it because it provides free SSL for up to 3 year and free renewal and multiple ...
0
votes
0answers
20 views

Is it possible to export a pcap / pcapng from fiddler?

And, if so, how? (For my purposes, I don't actually need any protocol information below the application layer, but the tools which work with pcaps provide some useful functionality.)
27
votes
2answers
3k views

Force Chrome to try HTTPS instead of HTTP when possible?

Many websites offer both, HTTP and HTTPS, e.g., http://stackoverflow.com and https://stackoverflow.com Is there any way to force Chrome to try HTTPS first before HTTP when I only type ...
0
votes
0answers
61 views

squid proxy 503 Service Unavailable response for https url

I am using squild-3.5.4 version on centos 6.3 . To support HTTPS url I configured Intercept HTTPS CONNECT messages with SSL-Bump from Squid documentation. But this configuration not working with https ...
1
vote
0answers
9 views

Can I view remote HTTP directories via something like sshfs?

It's possible to mount remote directories via sshfs, if you have the correct login credentials to connect via ssh. I've also seen many websites with the 'autoindex' functionality (e.g. here and ...
0
votes
0answers
33 views

iptables does not redirect my HTTPS request

I configured my tables to redirect all traffic to a static IP. for ports 80, 443 + any port (NAT-DNAT redirect withour having specified ports). If I enter an IP:anyport or an url.ext, it does ...
13
votes
3answers
33k views

Can you get a reply from a HTTPS site using the Ping command?

I tried using the ping command on a https page, but the message says that ping could not find the host. Is there some issue regarding ping and https?
1
vote
0answers
43 views

HTTP/2 has much higher TTFB than HTTP/1.1

Has anyone else experience this issue with HTTP/2 on IIS10. I have a VM set up on Azure with a Website on IIS10. I've set up SSL etc. and tested the site on HTTP/2, turned off SSL and tested it on ...
0
votes
2answers
276 views

Apache http to https redirect with Rewrite

Using Apache 2.4 on OS X Yosemite. Need to modify this virtual host for it to redirect http://server.kibana and http://www.server.kibana to https://server.kibana Here is the Vhost: <VirtualHost ...
5
votes
4answers
1k views

Is it safe to register on an HTTP webpage when I am using VPN?

I only register (make an account/login stuff) on HTTPS webpages. However, a webpage I wanted to register right now doesn't use HTTPS. I am wondering if I am connected to my company VPN, is it safe to ...
12
votes
5answers
20k views

How much information can my ISP see?

Is it possible for my ISP to see the passwords that I enter on websites and in chat programs? And what about SSL websites that start with https, do they encrypt my username and password before ...
-2
votes
2answers
89 views

What type of information does HTTPs make private from an ISP? [duplicate]

How private is HTTPs to an ISP? For example, Can my ISP know the entire URL (Not only the domain) while connecting to a website with HTTPs? Can my ISP see images loaded through a website connected to ...
0
votes
0answers
1k views

Google Chrome gives ERR_ADDRESS_UNREACHABLE error for HTTPS page (site is perfectly reachable via curl)

A otherwise perfectly working Chrome browser gives an ERR_ADDRESS_UNREACHABLE error for a request to a https page on port 8443. The page is reachable via curl, Firefox, Safari.. How would I go about ...
-2
votes
1answer
231 views

Why not https everywhere? [closed]

So https is supposed to be safer than http (encrypted), why is https then not used everywhere? Would it not make the web a more safe place? What could be the reason that https is not implemented when ...
4
votes
2answers
2k views

How to troubleshoot “Secure Connection Failed” in Firefox appearing since the version 38?

Since I upgraded Firefox to the version 38 I encounter problem while sending a certain form on the website https://usercenter.checkpoint.com/ Most of the website works normally but sending a form ...
1
vote
1answer
84 views

lighttpd complains about ssl.use-compression

I am trying to apply some of the tricks described here, and the problem is having ssl.use-compression = "disable" in lighttpd.conf, because server reports WARNING: unknown config-key: ...
3
votes
1answer
85 views

How to block insecure images on HTTPS pages in Chromium on Linux?

I'm trying to figure out a way to stop Chromium from loading insecure (i.e. non-HTTPS) images on pages served over HTTPS (i.e. basically the exact opposite of this question). Alas, all the ...