HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

learn more… | top users | synonyms

54
votes
7answers
228k views

How do I disable the warning Chrome gives if a security certificate is not trusted?

I want to know if it's possible to disable the warning you get in Chrome when you try to go to some HTTPS site that doesn't have a trusted certificate. I have a few sites in my bookmarks that use ...
32
votes
2answers
2k views

Why do some websites show the company name next to the URL?

Some websites show the company name next to the URL (in Chrome) and some don't. How do I set this up for my website? Is there a reason why or why I wouldn't want to do this?
31
votes
4answers
922 views

Can the URL be read by third parties when browsing via HTTPS?

We all know that HTTPS encrypts the connection between the computer and the server so that it cannot be viewed by a third party. However, can the ISP or a third party see the exact link of the page ...
22
votes
8answers
13k views

Is there an HTTPS Everywhere add on for Chrome, MSIE or safari?

I really like this HTTPS Everywhere add-on for Firefox. But I tend to browser hop, so have similar HTTPS-preferring add-ons been released for the other major browsers?
18
votes
1answer
18k views

How to easily create a SSL certificate and configure it in Apache2 in Mac OS X?

I'd like to use my Mac OS X with https for local development tests. How can I easily make Apache2 respond to ssl, just for test proposes - I don't want a real certificate, just a fake to make local ...
18
votes
1answer
46k views

IE9: Permanently accept untrusted certificate

When accessing a website via HTTPS which has an untrusted certificate, Internet Explorer 9 always shows me the following error message: Is there a way to import the certificate permanently, so that ...
16
votes
2answers
1k views

Does https encrypt URLs, too?

This is fairly easy. If I go to https://webserver.com/someurl?a=b, will the someurl?a=b part be protected, or just the contents of the site?
14
votes
9answers
16k views

Mac OS X Lion 10.7.2 update breaks SSL

Summary After updating from 10.7.1 to 10.7.2, neither Safari nor Google Chrome can load GMail. Spinning Beachballs all around. The problem isn't GMail; Firefox loads GMail just fine. The problem ...
13
votes
3answers
10k views

How can I disable SSL (https) google search in FireFox?

I know that Firefox 14 has enabled Secure Sockets Layer (SSL or https) search for its Google search plug-in. How can I disable it? Thanks,
10
votes
3answers
21k views

The certificate is not trusted because no issuer chain was provided

Could anyone explain the meaning of this error message in plain English? Should I add an exception or I should not continue on this website? Technical details: the URL is here, the browser is ...
10
votes
2answers
530 views

Allow HTTPS cookies but not HTTP?

I want to allow cookies for a domain but only over HTTPS -- not cookies from the same domain that come from HTTP. For example, I don't want any http://www.google.com cookies, but I do want to allow ...
9
votes
1answer
5k views

What makes the address bar in IE turn green?

What aspect of a site's SSL certificate causes IE's address bar to turn green? I'm working on a site which already uses SSL successfully, but am interested to know if there are different levels of ...
8
votes
2answers
2k views

All https sites have expired certificates

Suddenly all https sites have expired certificates on all browsers, even formatting and reinstalling Windows didn't work! I tried many different connections as well.
8
votes
5answers
813 views

Downloading Microsoft Security Essentials via HTTPS

I want to download Microsoft Security Essentials on my brand new Windows 7 home PC. The official site presented to me is http://windows.microsoft.com/de-CH/windows/products/security-essentials, as I ...
8
votes
4answers
3k views

Force a browser to load the 'https' edition of a website, not the 'http'?

This is similar to this previous question, but I believe it's a bit different*. Sites like GMail support a preference that pushes all traffic through the SSL edition of the site rather than the ...
8
votes
2answers
4k views

How do I access Gmail in lynx?

Client does not support https. That is all I am getting. I even tried the basic HTML link.
7
votes
2answers
19k views

Can you get a reply from a HTTPS site using the Ping command?

I tried using the ping command on a https page, but the message says that ping could not find the host. Is there some issue regarding ping and https?
7
votes
3answers
3k views

What is the correct cipher name for RC4 in Chrome?

I want to remove RC4 from Google Chrome and found the commandline option --cipher-suite-blacklist. However I wasn't able to figure out what the correct notation for RC4 is. Whatever I tried so far ...
7
votes
3answers
4k views

Manual HTTP(S) request

I am looking for a tool (possibly on Linux) that will allow me to make a manual HTTP or HTTPS request. By manual, I really mean it: I should be able to feed it a text file which looks like POST /foo ...
7
votes
7answers
1k views

Am I secure from network monitoring software if HTTPS is used?

I will be logging into my bank account and my personal email accounts at work. Its not banned at work, but I just don't want them to save/log a copy of whatever I do with these services. Especially my ...
7
votes
2answers
2k views

Why are email transfers between mail servers often not encrypted? Why aren't users warned about it?

Users can often choose if they want to access their email provider (such as Gmail) using a secure channel (e.g. using HTTPS). However, to the best of my knowledge, when it comes to ...
7
votes
2answers
653 views

How to tell which resources are loaded “insecurely” with Chrome using https

I understand this is because I'm loading some stuff via http:// but does that mean a single http reference can't appear in the source? Even in examples like <a href="http://...">...</a>? ...
7
votes
3answers
51k views

What is the modern day equivalent of Firesheep?

Firesheep came out on the scene in 2010 and rocked the world... and never made it to version 1.0. Mozilla has since released 15 major versions of Firefox and is incompatible with the extension. Is ...
6
votes
2answers
732 views

Do i really need to clear my browser cache after using a https site to protect the privacy of the pages i visited?

I've seen a number of online banking sites which, after logging out, have a message recommending that I clear my browser cache to ensure my private banking information remains secure. Is that really ...
6
votes
2answers
198 views

Why might a browser sometimes ask for confirmation when going to an HTTPS page?

When I click on a link to an HTTPS link, the browser will sometimes ask for confirmation or channel me though a form before it will allow me to se the page. Why would it do this? (This question ...
6
votes
1answer
11k views

How to add a self-signed certificate as an exception in Chrome?

I have a number of network devices that I access over HTTPS. However, they are self-signed certificates, so Chrome displays a warning page. In earlier versions of chrome, I seem to remember an "add ...
5
votes
5answers
37k views

Certificate error with Internet Explorer 9

one of my coworkers installed IE9 on their computer. They are now having trouble accessing some websites that once worked(and still work) in other browsers. One example is this page: ...
5
votes
2answers
7k views

“Cannot connect to the real Gmail.com”

Dunno what happened, but suddenly I cannot connect to Gmail from Chrome on this computer: Under "more" it says: What does this mean? gmail.com normally uses encryption (SSL) to protect ...
5
votes
3answers
148 views

Redirect ALL web traffic through TLS without a VPN

Assumptions: Server: I have a Debian Squeeze server, routable on the public Internet, with a static IPv4 address. I have unrestricted access to modify the software on the server. The server can ...
5
votes
1answer
537 views

What happened to the Https Lock in Firefox 4?

Previous versions of Firefox used to have a padlock icon in the address bar whenever you browsed to a HTTPS site. Since Firefox 4 it no longer seems to be there. What happened to it? Is there any way ...
5
votes
2answers
363 views

Netflix SSL certificate shows up when trying to visit https://www.google.com

I'm on a hotel Wi-Fi network where occasionally the following message shows up in Chrome when trying to visit any Google sites over HTTPS: The SSL certificate reported when this happens is This ...
5
votes
3answers
1k views

Is it possible for my company to monitor my Gmail?

Since Gmail uses https, all the messages should be encrypted? Here we assume my company does not have keystroke logger or random snapshot software.
5
votes
2answers
944 views

Prevent Internet Explorer from caching SSL client certificates

I use a particular HTTPS website, but I have to separate client certificates that I use to authenticate (sometimes I use one account, which requires certificate A and sometimes a different one, which ...
4
votes
9answers
2k views

Force web address to go through HTTPS

At my work, http://twitter.com is blocked, but https://twitter is not. Is there any way to have all programs/browsers access this URL using the HTTPS protocol instead of HTTP? This specifically ...
4
votes
1answer
1k views

Why Chromium does not open the Gmail? (reporting a certificate error)

The error I get: The server's security certificate is revoked! You attempted to reach www.google.com, but the certificate that the server presented has been revoked by its issuer. This means that ...
4
votes
2answers
2k views

How to recursively upload a directory to a WebDAV server through HTTPS from the command line?

I'm facing a rather simple situation, I have to upload, as-is, a big tree of files to a WebDAV server that's reachable over HTTPS. I must start the upload from a linux box with command line only. I ...
4
votes
1answer
1k views

Is gitosis or gitolite necessary to push changes via HTTP/HTTPS to remote git repository?

I have an apache2 server running a virtual host with HTTPS and basic authentication enabled. The virtual host serves GIT repositories via gitweb script. Authenticated users pull repositories from ...
4
votes
1answer
376 views

Does there exist a telnet-like for SSL connections?

are there any telnet-like tool that can manually debug a https connection byte by byte?
4
votes
1answer
1k views

How to test that SNI is supported by given webbrowser?

I just want to test this: https://secure.wikimedia.org/wikipedia/en/wiki/Server_Name_Indication on different webbrowsers. (if it's working or not) I know I could Google HTTPS sites using the: ...
4
votes
2answers
7k views

Safari can’t establish a secure connection to the server

I realize there is another question with the same title, but my situation is very different. The problem started on three of my computers after upgrading from Leopard to Snow Leopard. I can login to ...
4
votes
2answers
5k views

Why does Chrome always redirect me to https://www.google.com

Whenever I enter "http://www.google.de" (or any other google domain) in the addressbar, it is automatically replaced by "https://www.google.de". This happens regardless of beeing logged in with my ...
3
votes
3answers
2k views

https over proxy safe from sniffing?

Apparently all the google ads in my gmail(https) are being filtered. I'm worried. So it means somehow the data pass through the company proxy and being filtered?
3
votes
2answers
3k views

How do I get to see an https certificate on a website that will not give its actual web pages by https but only files that don't display in the brow?

On a domain like truecrypt.org, you cannot see the actual website trough https, but when you download the signatures of their files or their pgp key, they will send it to you through https. However ...
3
votes
4answers
5k views

Log HTTP and HTTPS browser traffic, decrypting the latter

Is there a way that I can save all HTTP and HTTPS browser communications (including request, response, full headers and body) to files on my computer? The HTTPS communications must be saved ...
3
votes
3answers
15k views

How can I force Google Chrome to remember HTTPS credentials?

Google Chrome is a great browser for sure, though I still see bugs there. Some of them are really annoying: my Chrome (at my work computer) does not offer to remember HTTPS authentication data, and I ...
3
votes
2answers
11k views

Where does Firefox store cerificates and how to delete one?

The root cause of my problem is not known to me, whatever it is, I experience frequent DNS failures. When it happens I cannot browse to my Gmail inbox. I use two DNS settings. One is the public DNS ...
3
votes
1answer
3k views

Does Heartbleed Bug in OpenSSL affect ALL SSL certs

Does the Heartbleed Bug in OpenSSL affect ALL SSL certs, regardless of where I purchased or if I self-cert? For example, if I bought an SSL certificate from GoDaddy and set this up on my server ...
3
votes
3answers
169 views

HTTPS certificates invalid on Safari, Chrome on specific user account

Safari and Chrome report invalid certificates on certain HTTPS sites (for example GitHub and Bitbucket). Firefox strangely shows a green valid certificate. I've created a new OS X user and everything ...
3
votes
2answers
6k views

Nginx as forward proxy for HTTPS

While I was able to successfully configure nginx to proxy HTTP traffic (using this guide), all attempts to proxy HTTPS requests resulted in code 400 (Bad Request). Nginx debug logs weren't helpful at ...
3
votes
2answers
1k views

How can I redirect HTTP requests to use HTTPS?

Is it possible to automatically redirect HTTP to HTTPS? Can I amend my host file in such a way that when I visit http://www.hsbc.co.uk it will redirect me to https://www.hsbc.co.uk? or is there ...