The Student Room Group

Security of website : httpS://www.xxxxxxxxxxxxxxx

hi..

i m using 1and1.co.uk hosting service.

and they offer ssl security for any website i have on 1and1

i tested a domain.. and now i can access both in https://www......... and than http://www.......

but....when i type in http://www..... shouldnt the domain change to httpS://www...... automatically ? how are the users suppose to remember to type in the S part ?

and what is the real benifit of this ?


plz help.

thanks
Reply 1
Hi

httpS:// is securty encrypted. http:// isn't. To have the http:// change to the httpS:// you should use a redirect. If you can't do this via the control panel just put the appropriate meta tag in your homepage.

e.g. user types in http://yoursite.com, is taken to http://yoursite.com/index.html; but that redirects to https://yoursite.com/start.htm (or whatever)
Reply 2
That way would work, or you could do it via the DNS entries.
Reply 3
It depends if you want unsecure and secure bits to your site, personally seeing a security message when I'm just browsing makes me think twice, almost like the Internet version of a pushy salesman. But if you want it secure right from the home page as you seem to, yes DNS entries would probably be a better way as you don't have to rename anything. Provided you get DNS access of course.
Reply 4
what do u mean DNS entries ?

change the name server ?
Reply 5
if anyone is not sure what SSL is, wikipedia has the answer. Combined threads :wink:

http://en.wikipedia.org/wiki/Secure_Sockets_Layer
Reply 6
mynameis
what do u mean DNS entries ?

change the name server ?


Yeah, make the A record point to https://www.yoursite.com then resolve that address to the IP of the server its on.
Not so handy if you want to split the site into non secure areas etc.

Another way around is to have http://www.yoursite.com and https://secure.yoursite.com
Reply 7
PieMaster
Yeah, make the A record point to https://www.yoursite.com then resolve that address to the IP of the server its on.
Not so handy if you want to split the site into non secure areas etc.

Another way around is to have http://www.yoursite.com and https://secure.yoursite.com


i dont get it.

with my registrar i can only change the name server. and which directory in my server its pointing to.


plz help~~~~~



thanks
Reply 8
If you have the hosting with 1&1 then they'll have access to the full DNS entries, if you only have the domain with them, you get the crappy referer script.

Have a look in the halp documentation about DNS entries on thier site if you have a package with them, as i'm not quite sure how they do it.

Latest

Trending

Trending