Questions tagged [https]

Hypertext Transfer Protocol Secure (HTTPS) is a combination of the Hypertext Transfer Protocol with the SSL/TLS protocol to provide encrypted communication and secure identification of a network web server.

Hypertext Transfer Protocol Secure () is a widely used communications protocol for secure communication over a computer network, with especially wide deployment on the Internet.

Technically, it is not a protocol in itself; rather, it is the result of simply putting SSL/TLS between Hypertext Transfer Protocol () and , thus adding the security capabilities of / to standard communications.

  • HTTP: HTTP | TCP | lower-layer-protocols
  • HTTPS: HTTP | TLS/SSL | TCP | lower-layer-protocols

HTTP uses the client/server computing model (), where a client makes a request of a server for access to a file or to pass a message to a program that runs in the server computer. The server takes the requested action and returns a response.

See the tag for more information on Transport Layer Security () and its predecessor, Secure Sockets Layer ().

Resources

25003 questions
188
votes
13 answers

node.js, socket.io with SSL

I'm trying to get socket.io running with my SSL certificate however, it will not connect. I based my code off the chat example: var https = require('https'); var fs = require('fs'); /** * Bootstrap app. */ var sys =…
Beyond
  • 2,050
  • 2
  • 13
  • 12
187
votes
9 answers

What's the most appropriate HTTP status code for an "item not found" error page

I'm curious what's the most appropriate HTTP status code for an "item does not exist" page. If the page itself doesn't exist, I'll obviously use 404. However, one of my pages has a userid argument (it's an "edit user" page) and in case no user with…
ThiefMaster
  • 310,957
  • 84
  • 592
  • 636
186
votes
11 answers

How do you redirect HTTPS to HTTP?

How do you redirect HTTPS to HTTP?. That is, the opposite of what (seemingly) everyone teaches. I have a server on HTTPS for which I paid an SSL certification for and a mirror for which I haven't and keep around for just for emergencies so it…
mauriciopastrana
  • 5,010
  • 7
  • 35
  • 36
182
votes
4 answers

Amazon S3 - HTTPS/SSL - Is it possible?

I saw a few other questions regarding this without any real answers or information (or so it appeared). I have an image here: http://furniture.retailcatalog.us/products/2061/6262u9665.jpg Which is redirecting…
Kerry Jones
  • 21,806
  • 12
  • 62
  • 89
176
votes
10 answers

How to allow http content within an iframe on a https site

I load some HTML into an iframe but when a file referenced is using http, not https, I get the following error: [blocked] The page at {current_pagename} ran insecure content from {referenced_filename} Is there any way to turn this off or any way…
georgephillips
  • 3,540
  • 4
  • 23
  • 30
171
votes
9 answers

How do I restore a missing IIS Express SSL Certificate?

After setting up HTTPS in IIS Express, according to such articles as this and this, I am unable to actually load an IIS Express site using HTTPS. In Chrome, I am only getting: This webpage is not available (with error code…
Chris Simmons
  • 6,924
  • 5
  • 31
  • 47
170
votes
2 answers

Two forward slashes in a url/src/href attribute

Possible Duplicate: URI starting with two slashes … how do they behave? Absolute URLs omitting the protocol (scheme) in order to preserve the one of the current page shorthand as // for script and link tags? anyone see / use this before? I was…
Michael Parkin
  • 1,855
  • 2
  • 12
  • 13
170
votes
13 answers

accepting HTTPS connections with self-signed certificates

I'm trying to make HTTPS connections, using HttpClient lib, but the problem is that, since the certificate isn't signed by a recognized Certificate Authority (CA) like Verisign,GlobalSIgn, etc., listed on the set of Android Trusted Certificates, I…
Morten
  • 4,507
  • 7
  • 29
  • 31
165
votes
21 answers

Unable to find the wrapper "https" - did you forget to enable it when you configured PHP?

The problem is in the question. I've done a thorough investigation for solutions in regards to this and I know there are topics to this and I've followed them too and nothing has worked. That being said I'll list out exactly everything I've done so…
John M
  • 1,813
  • 3
  • 15
  • 12
159
votes
12 answers

Are there any HTTP/HTTPS interception tools like Fiddler for mac OS X?

I would like to know if there are any applications like fiddler but for mac OS X, as I need to debug some requests from web applications in Mac OS X. I used to do it with fiddler on Windows and would love to have this tool available on Mac as well.
Fgblanch
  • 5,195
  • 8
  • 37
  • 51
157
votes
6 answers

Is there any downside for using a leading double slash to inherit the protocol in a URL? i.e. src="//domain.example"

I have a stylesheet that loads images from an external domain and I need it to load from https:// from secure order pages and http:// from other pages, based on the current URL. I found that starting the URL with a double slash inherits the current…
Rob Volk
  • 5,204
  • 5
  • 25
  • 19
157
votes
4 answers

PHP CURL CURLOPT_SSL_VERIFYPEER ignored

For some reason I am unable to use CURL with HTTPS. Everything was working fine untill I ran upgrade of curl libraries. Now I am experiencing this response when trying to perform CURL requests: Problem with the SSL CA cert (path? access…
Greg
  • 2,413
  • 5
  • 22
  • 23
156
votes
16 answers

Converting a Java Keystore into PEM Format

I am trying to convert from a Java keystore file into a PEM file using keytool and openssl applicactions. But I could not find a good way to do the conversion. Any ideas? Instead of converting the keystore directly into PEM I tried to create a…
Chathuranga Chandrasekara
  • 20,548
  • 30
  • 97
  • 138
154
votes
13 answers

Should I hash the password before sending it to the server side?

I noticed that most sites send the passwords as plain text over HTTPS to the server. Is there any advantage if instead of that I sent the hash of the password to the server? Would it be more secure?
Jader Dias
  • 88,211
  • 155
  • 421
  • 625
151
votes
11 answers

Powershell v3 Invoke-WebRequest HTTPS error

Using Powershell v3's Invoke-WebRequest and Invoke-RestMethod I have succesfully used the POST method to post a json file to a https website. The command I'm using is $cert=New-Object…
floyd
  • 2,080
  • 4
  • 17
  • 19