Questions tagged [https]

Hypertext Transfer Protocol Secure (HTTPS) is a combination of the Hypertext Transfer Protocol with the SSL/TLS protocol to provide encrypted communication and secure identification of a network web server.

Hypertext Transfer Protocol Secure () is a widely used communications protocol for secure communication over a computer network, with especially wide deployment on the Internet.

Technically, it is not a protocol in itself; rather, it is the result of simply putting SSL/TLS between Hypertext Transfer Protocol () and , thus adding the security capabilities of / to standard communications.

  • HTTP: HTTP | TCP | lower-layer-protocols
  • HTTPS: HTTP | TLS/SSL | TCP | lower-layer-protocols

HTTP uses the client/server computing model (), where a client makes a request of a server for access to a file or to pass a message to a program that runs in the server computer. The server takes the requested action and returns a response.

See the tag for more information on Transport Layer Security () and its predecessor, Secure Sockets Layer ().

Resources

25003 questions
414
votes
17 answers

Why am I suddenly getting a "Blocked loading mixed active content" issue in Firefox?

This morning, upon upgrading my Firefox browser to the latest version (from 22 to 23), some of the key aspects of my back office (website) stopped working. Looking at the Firebug log, the following errors were being reported: Blocked loading mixed…
Appulus
  • 18,630
  • 11
  • 38
  • 46
414
votes
13 answers

Ignore invalid self-signed ssl certificate in node.js with https.request?

I'm working on a little app that logs into my local wireless router (Linksys) but I'm running into a problem with the router's self-signed ssl certificate. I ran wget 192.168.1.1 and get: ERROR: cannot verify 192.168.1.1's certificate, issued by…
Geuis
  • 41,122
  • 56
  • 157
  • 219
404
votes
10 answers

How to create an HTTPS server in Node.js?

Given an SSL key and certificate, how does one create an HTTPS service?
murvinlai
  • 48,919
  • 52
  • 129
  • 177
391
votes
9 answers

How can I see the entire HTTP request that's being sent by my Python application?

In my case, I'm using the requests library to call PayPal's API over HTTPS. Unfortunately, I'm getting an error from PayPal, and PayPal support cannot figure out what the error is or what's causing it. They want me to "Please provide the entire…
Chris B.
  • 85,731
  • 25
  • 98
  • 139
388
votes
22 answers

HTTP vs HTTPS performance

Are there any major differences in performance between http and https? I seem to recall reading that HTTPS can be a fifth as fast as HTTP. Is this valid with the current generation webservers/browsers? If so, are there any whitepapers to support…
Jim Geurts
  • 20,189
  • 23
  • 95
  • 116
373
votes
29 answers

Java: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

I have a class that will download a file from a https server. When I run it, it returns a lot of errors. It seems that I have a problem with my certificate. Is it possible to ignore the client-server authentication? If so, how? package…
neztreh
  • 3,971
  • 3
  • 19
  • 17
360
votes
13 answers

Detect HTTP or HTTPS then force HTTPS in JavaScript

Is there any way to detect HTTP or HTTPS and then force usage of HTTPS with JavaScript? I have some codes for detecting the HTTP or HTTPS but I can't force it to use https: . I'm using the window.location.protocol property to set whatever the site…
Registered User
  • 8,706
  • 9
  • 32
  • 40
332
votes
14 answers

htaccess redirect to https://www

I have the following htaccess code: RewriteEngine On RewriteCond !{HTTPS} off RewriteRule ^(.*)$ https://www.%{HTTP_HOST}%{REQUEST_URI} [L,R=301] RewriteCond %{HTTP_HOST} !^www\. RewriteRule ^(.*)$…
bigben
  • 3,381
  • 4
  • 15
  • 8
331
votes
16 answers

The provided URI scheme 'https' is invalid; expected 'http'. Parameter name: via

I am trying to make a WCF service over basicHttpBinding to be used over https. Here's my web.config:
isg
  • 3,311
  • 2
  • 16
  • 3
330
votes
29 answers

How to redirect all HTTP requests to HTTPS using .htaccess rules?

I'm trying to redirect all insecure HTTP requests on my site (e.g. http://www.example.com) to HTTPS (https://www.example.com). How can I do this in .htaccess file? By the way, I'm using PHP.
Cat
  • 7,042
  • 8
  • 34
  • 36
307
votes
13 answers

How to use NSURLConnection to connect with SSL for an untrusted cert?

I have the following simple code to connect to a SSL webpage NSMutableURLRequest *urlRequest=[NSMutableURLRequest requestWithURL:url]; [ NSURLConnection sendSynchronousRequest: urlRequest returningResponse: nil error: &error ]; Except it gives an…
erotsppa
  • 14,248
  • 33
  • 123
  • 181
279
votes
14 answers

Response.Redirect with POST instead of Get?

We have the requirement to take a form submission and save some data, then redirect the user to a page offsite, but in redirecting, we need to "submit" a form with POST, not GET. I was hoping there was an easy way to accomplish this, but I'm…
Matt Dawdy
  • 19,247
  • 18
  • 66
  • 91
272
votes
9 answers

Java HTTPS client certificate authentication

I'm fairly new to HTTPS/SSL/TLS and I'm a bit confused over what exactly the clients are supposed to present when authenticating with certificates. I'm writing a Java client that needs to do a simple POST of data to a particular URL. That part works…
tmbrggmn
  • 8,680
  • 10
  • 35
  • 44
268
votes
25 answers

How do I deal with certificates using cURL while trying to access an HTTPS url?

I am getting the following error using curl: curl: (77) error setting certificate verify locations: CAfile: /etc/ssl/certs/ca-certificates.crt CApath: none How do I set this certificate verify locations?
moorecats
  • 3,242
  • 3
  • 21
  • 23
264
votes
3 answers

HTTP Basic Authentication credentials passed in URL and encryption

I have a question about HTTPS and HTTP Authentication credentials. Suppose I secure a URL with HTTP Authentication: AuthType Basic AuthName "Restricted Area" AuthUserFile /var/www/passwd/passwords Require user…
rcourtna
  • 4,589
  • 5
  • 26
  • 27