Tagged Questions

Hypertext Transfer Protocol Secure (HTTPS) is a combination of the Hypertext Transfer Protocol with the SSL/TLS protocol to provide encrypted communication and secure identification of a network web server.

learn more… | top users | synonyms

183
votes
8answers
19k views

Is it valid to replace http:// with // in a <script src=“http://…”>?

I have the following tag: <script type="text/javascript" src="https://cdn.example.com/js_file.js"></script> In this case the site is HTTPS, but the site may also be just HTTP. (The JS ...
168
votes
17answers
74k views

Making sure a web page is not cached, across all browsers

Our investigations have shown us that not all browsers respect the http cache directives in a uniform manner. For security reasons we do not want certain pages in our application to cached, ever, by ...
166
votes
14answers
74k views

HTTP vs HTTPS performance

Are there any major differences in performance between http and https? I seem to recall reading that https can be up to 1/5 times slower than http. Is this valid with the current generation ...
158
votes
7answers
102k views

How to use NSURLConnection to connect with SSL for an untrusted cert?

I have the following simple code to connect to a SSL webpage NSMutableURLRequest *urlRequest=[NSMutableURLRequest requestWithURL:url]; [ NSURLConnection sendSynchronousRequest: urlRequest ...
151
votes
6answers
31k views

Are https URLs encrypted?

Are all URL's encrypted when using SSL(https) encryption? I would like to know because I want all URL data to be hidden when using SSL(https). If SSL gives you total URL encryption then I don't have ...
135
votes
2answers
35k views

Will web browsers cache content over https

Will content requested over https still be cached by web browsers or do they consider this insecure behaviour? If this is the case is there anyway to tell them it's ok to cache?
121
votes
14answers
77k views

Response.Redirect with POST instead of Get?

We have the requirement to take a form submission and save some data, then redirect the user to a page offsite, but in redirecting, we need to "submit" a form with POST, not GET. I was hoping there ...
105
votes
13answers
118k views

Trusting all certificates using HttpClient over HTTPS

Recently posted a question regarding the HttpClient over Https (found here). I've made some headway, but I've run into new issues. As with my last problem, I can't seem to find an example anywhere ...
89
votes
3answers
12k views

Can I change all my http:// links to just //?

Dave Ward says, It’s not exactly light reading, but section 4.2 of RFC 3986 provides for fully qualified URLs that omit protocol (the HTTP or HTTPS) altogether. When a URL’s protocol is omitted, ...
76
votes
6answers
22k views

Are HTTPS headers encrypted?

When sending data over HTTPS, I know the content is encrypted, however I hear mixed answers about whether the headers are encrypted, or how much of the header is encrypted. How much of HTTPS headers ...
75
votes
6answers
74k views

The provided URI scheme 'https' is invalid; expected 'http'. Parameter name: via

I am trying to make a WCF service over basicHttpBinding to be used over https. Here's my web.config: <service behaviorConfiguration="MyServices.PingResultServiceBehavior" ...
73
votes
8answers
15k views

Is an HTTPS query string secure?

I am creating a secure web based API that uses HTTPS; however, if I allow the users to configure it (include sending password) using a query string will this also be secure or should I force it to be ...
67
votes
12answers
55k views

Are there any HTTP/HTTPS interception tools like Fiddler for mac os X? [closed]

I would want to ask you if you know any application like fiddler but for mac os x , i need to debug some requests from google earth in mac os x. i used to do it with fiddler on windows but now i don't ...
63
votes
10answers
13k views

ASP.NET MVC RequireHttps in Production Only

I want to use the RequireHttpsAttribute to prevent unsecured HTTP requests from being sent to an action method. C# [RequireHttps] //apply to all actions in controller public class SomeController { ...
57
votes
5answers
83k views

Accepting a certificate for HTTPs on Android

I'm trying to make Https connections on the Android phones, using HttpClient. Trouble is that since the certificate isn't signed I keep getting "javax.net.ssl.SSLException: Not trusted server ...

1 2 3 4 5 … 377
15 30 50 per page