25,047 questions
3
votes
3
answers
3k
views
Download xml.gz file with HttpsURLConnection
I am trying to download an xml.gz file from a remote server with HttpsURLConnection in java, but I am getting an empty response. Here is a sample of my code:
URL server = new URL("https://www.myurl....
- 959
8
votes
3
answers
6k
views
Secure iframe on unsecure page in a different domain
Our company is looking into allowing third party sites to use our online checkout system.
A client has stated that they would like to be able to use a lightbox style popup to display the checkout. ...
- 1,625
1
vote
2
answers
5k
views
Configure multiple keystores in JBoss depending on requested hostname
I have my J2EE application deployed into a JBossAS. My Application has to respond to two different hostnames (https://foo.com/myApp and https://bar.com/myApp). It is the same instance of the app ...
- 15.4k
7
votes
4
answers
10k
views
Connect to self-signed HTTPS web services from Flex
In my project I need to connect to an intra-net web service but we need SSL connection between the two machines.
Because this is an intra-net site the certificate of the web service might be a self-...
- 101
795
votes
9
answers
353k
views
Are HTTPS headers encrypted?
When sending data over HTTPS, I know the content is encrypted, however I hear mixed answers about whether the headers are encrypted, or how much of the header is encrypted.
How much of HTTPS headers ...
- 104k
9
votes
5
answers
48k
views
How to disable "Security Alert" window in Webbrowser control
I'm using Webbrowser control to login to HTTPS site with "untrusted certificate".
but I get popup such standart window "Security Alert" about untrusted certificate:
I have to find this window by title ...
- 123
251
votes
3
answers
98k
views
Will web browsers cache content over https
Will content requested over https still be cached by web browsers or do they consider this insecure behaviour? If this is the case is there anyway to tell them it's ok to cache?
- 26.6k
5
votes
3
answers
6k
views
"CURLE_OUT_OF_MEMORY" error when posting via https
I am attempting to write an application that uses libCurl to post soap requests to a secure web service. This Windows application is built against libCurl version 7.19.0 which, in turn, is built ...
- 4,584
81
votes
12
answers
50k
views
SSL pages under ASP.NET MVC
How do I go about using HTTPS for some of the pages in my ASP.NET MVC based site?
Steve Sanderson has a pretty good tutorial on how to do this in a DRY way on Preview 4 at:
http://blog.codeville.net/...
- 7,695
17
votes
3
answers
9k
views
Is encrypting AJAX calls for authentication possible with jQuery?
I'm fairly new to the AJAX methodologies (I only recently discovered jQuery a short time ago). I am interested to know if there is anyway to authenticate a user on a PHP setup; securely.
Does jQuery ...
- 8,678
7
votes
6
answers
10k
views
Security implications of disabling the Common Name check for HTTPS
I'm going over some client code I've inherited for doing secure communication over HTTPS, and it seems that it's not checking the common name in the server certificate (eg. 'CN = "example.com&...
- 71
19
votes
10
answers
3k
views
Where should you enable SSL?
My last couple of projects have involved websites that sell a product/service and require a 'checkout' process in which users put in their credit card information and such. Obviously we got SSL ...
- 490k
0
votes
2
answers
1k
views
Blocking https url's in a embedded gecko browser
I have an application in which a gecko browser is embedded. The application is crashing when I try to access any https url's because nss is not properly initialised at this point. The crash is in ...
jbsp72
4
votes
5
answers
4k
views
Rails SSL Requirement plugin -- shouldn't it check to see if you're in production mode before redirecting to https?
Take a look at the ssl_requirement plugin.
Shouldn't it check to see if you're in production mode? We're seeing a redirect to https in development mode, which seems odd. Or is that the normal ...
- 6,990
144
votes
22
answers
202k
views
How can I force users to access my page over HTTPS instead of HTTP?
I've got just one page that I want to force to be accessed as an HTTPS page (PHP on Apache). How do I do this without making the whole directory require HTTPS? Or, if you submit a form to an HTTPS ...
6
votes
7
answers
7k
views
What must I do to make content such as images served over HTTPS be cached client-side?
I am using Tomcat as a server and Internet Explorer 6 as a browser. A web page in our app has about 75 images. We are using SSL. It seems to be very slow at loading all the content. How can I ...
- 52.6k
3
votes
5
answers
300
views
What's a clean/simple way to ensure the security of a page?
Supposing you have a form that collects and submits sensitive information and you want to ensure it is never accessed via insecure (non-HTTPS) means, how might you best go about enforcing that policy?
- 8,906
214
votes
16
answers
213k
views
Best way in asp.net to force https for an entire site?
About 6 months ago I rolled out a site where every request needed to be over https. The only way at the time I could find to ensure that every request to a page was over https was to check it in the ...
- 2,377
283
votes
14
answers
305k
views
Response.Redirect with POST instead of Get?
We have the requirement to take a form submission and save some data, then redirect the user to a page offsite, but in redirecting, we need to "submit" a form with POST, not GET.
I was hoping there ...
- 19.8k
148
votes
6
answers
72k
views
IIS7: HTTP->HTTPS Cleanly
Is there a clean way to redirect all attempts to going to an HTTP:// version of a site to its HTTPS:// equivalent?
- 3,803
16
votes
3
answers
15k
views
Testing HTTPS files with MAMP [closed]
I am running MAMP locally on my laptop, and I like to test as much as I can locally. Unfortunately, since I work on e-commerce stuff (PHP), I normally force ssl in most of the checkout forms and it ...
- 253
6
votes
3
answers
7k
views
Avoid traffic shaping by using ssh on port 443
I heard that if you use port 443 (the port usually used for https) for ssh, the encrypted packets look the same to your isp.
Could this be a way to avoid traffic shaping/throttling?
- 77.4k
196
votes
11
answers
515k
views
How do you redirect HTTPS to HTTP?
How do you redirect HTTPS to HTTP?. That is, the opposite of what (seemingly) everyone teaches.
I have a server on HTTPS for which I paid an SSL certification for and a mirror for which I haven't and ...
- 5,100
20
votes
7
answers
16k
views
Options for Google Maps over SSL
We recently discovered that the Google Maps API does not play nicely with SSL. Fair enough, but what are some options for overcoming this that others have used effectively?
Will the Maps API work ...
- 7,487