HTTP, HTTPS, Shared SSL, and SEO -
i looking around @ of features current web host offers, , wondering few things. if can answer part of this, appreciate can provide.
i have domain, mydomian.com, , host offers shared ssl can use https using address https://mydomain.myhost.com. ssl certificate *.myhost.com.
i don't know lot ssl, i'm assuming means data between site users , domain on myhost.com encrypted. curious if meant if else on same host me somehow intercepted data site able view it, since have https://theirdomain.myhost.com address, uses same ssl certificate? may have no idea @ all, , pretty guess.
if https used on login page, after logging in other pages viewed on http, security issue?
is there way show web form via http bots google, have real users redirected https version? ideal if done via .htaccess. have rewrite rules redirect pages https, rest http. if visitor visits contact form https version automatically, automatically switches http pages don't contain forms. so, via htaccess, there way direct real users https version, have bots directed http version? these pages still indexed search engines, users see via https.
thanks in advance can provide.
i'm going guess you'll okay number one. if host correctly, individual subdomains never see ssl keys. here's how work:
- some guy browser sends encrypted request subdomain server.
- your host's master server receives request , decrypts it.
- the master server sends decrypted request subdomain server.
and https responses send go through process in reverse. should easy check if they've set things way: if can set shared ssl without handling key files, you're good. if hands on key files... not good.
for two: if encrypt login, protect passwords, good. if switch http afterwards, open other attacks. see: firesheep. there may others.
and three. yes - doable. check out mod_rewrite. can't give example, i've never used particular case, can point this page - particularly section entitled "browser dependent content."
hope helps!
Comments
Post a Comment