Linked Questions
16 questions linked to/from Why is HTTPS not the default protocol?
62
votes
8
answers
64k
views
Why do browsers default to http: and not https: for typed in URLs? [duplicate]
When I type example.com without any scheme into the browser bar and press Enter it is interpreted as HTTP://example.com, not HTTPS://example.com. Why? And where are the plans to fix this?
(To be ...
11
votes
2
answers
2k
views
Why are we still using HTTP? [duplicate]
I've been reading a lot of online articles and blogs about advantages of using HTTPS (HTTP over SSL/TLS) and the performance issues involved in deploying a website over HTTPS. What I understood is ...
- 4,317
0
votes
1
answer
86
views
Initial requests sent over HTTP by default [duplicate]
Before the invention of HSTS security policy, if a user didn't specify the protocol in the URL, were all the initial requests sent over HTTP by default for every website?
- 33
97
votes
9
answers
108k
views
Can my company see what HTTPS sites I went to?
At work my company uses internet monitoring software (Websense). I know if I visit a https ssl-encrypted site (such as https://secure.example.com) they can't see what I'm doing on the site since all ...
82
votes
13
answers
26k
views
What are the pros and cons of site wide SSL (https)?
What are the pros and cons of encrypting all HTTP traffic for the whole site through SSL, as opposed to SSL on just the login page?
- 5,089
112
votes
6
answers
25k
views
Why should I offer HTTP in addition to HTTPS?
I am setting up a new webserver. In addition to TLS/HTTPS, I'm considering implementing Strict-Transport-Security and other HTTPS-enforcement mechanisms.
These all seem to be based on the assumption ...
- 3,600
79
votes
3
answers
12k
views
Are URLs viewed during HTTPS transactions to one or more websites from a single IP distinguishable?
For example, say the following are HTTPS URLs to two websites by one IP over 5 mins:
"A.com/1", "A.com/2", "A.com/3", "B.com/1", "B.com/2".
Would monitoring of packets reveal:
nothing,
reveal only ...
- 5,072
64
votes
4
answers
19k
views
Why aren't application downloads routinely done over HTTPS?
We all know we should be using SSL whenever we collect passwords or other sensitive information. SSL provides two main benefits:
Encryption: The data can't be read by a middle-man while in transit.
...
- 3,302
28
votes
1
answer
25k
views
My understanding of how HTTPS works (gmail for example)
I want to ask if my below understanding is correct or not regarding the HTTPS used for the webpage we are visiting.
I will use Gmail as an example:
My laptop tries to connect to the Gmail server ...
- 409
5
votes
3
answers
4k
views
Can serving HTTPS to Internet Explorer on Windows XP be made secure?
Answers to Why is HTTPS not the default protocol? state that a lot of sites still use clear HTTP instead of HTTPS because all of these are true:
A substantial number of visitors to the site use ...
- 562
2
votes
1
answer
937
views
Man in the middle using HTTPs downgrade to HTTP
In general browsers attempt to establish a HTTPs-Connection if possible. How would you force a browser to fallback to HTTP when somebody enters asdf.xyz in the search bar of his/her browser without ...
- 123
3
votes
2
answers
432
views
https://www.truecrypt.org forwards to http://www.truecrypt.org
Why is the site doing this? Is that a security flaw? In general, I'd be wary about using a http site instead of a https, although regarding truecrypt specifically, I came to trust it. I wonder why not ...
- 1,881
1
vote
2
answers
651
views
Why do some HTTPS-enabled websites use HTTP by default?
Some sites like Stack Exchange have an HTTPS version available. But when I type their address or go to them via Google, I get an unencrypted version.
This seems to render the HTTPS version totally ...
- 1,925
3
votes
2
answers
277
views
If not using HTTPS/SSL/TLS is such a security risk, why don't sites/browsers force HTTPS for all sites that have it?
From my other question Besides Plain-Text passwords, is there anything to worry about with sites that don't use SSL?
there are answers that mention all sorts of things that can happen if there is ...
- 907
-1
votes
4
answers
190
views
Can SSL deployment incur performance issues [closed]
Does SSL deployment for secure server-client communication incur any performance overhead? I ask myself, why not just use HTTPS for standard web browsing when it is proven that it protects our privacy?...
- 413