The reason I ask is that usually there is a section that would come under the secure server but that may only be a couple of pages and doesn’t require a complete redirect.
As I was told, per NYS or Erie County law any attorneys website needs
to be SSL. In addition it needs the bottom statement (attorney
advertising)
Per Godaddy I need to do some switch in freeway to have it redirect.
to the https://
they do not do anything. I also am waiting for the html to put the
“seal” on the site… which is another question - how do I do that…
but, I am more worried about redirecting.
Julie
On Nov 10, 2009, at 8:23 PM, DeltaDave wrote:
What particularly do you need to protect?
The reason I ask is that usually there is a section that would come
under the secure server but that may only be a couple of pages and
doesn’t require a complete redirect.
Remember the list of sites I posted on 6th November under sitereview - none of those were https hosted!
I think I would be asking a few more questions about this because if you are limiting this site to publicly available information I cannot understand the requirement for a secure server.
I did I was pleasantly surprised where they were from… (I am from
Jersey originally)
It might be an erie county thing also.
But I will “forward” your question to him. I thought it was strange…
Julie
On Nov 10, 2009, at 8:44 PM, DeltaDave wrote:
Remember the list of sites I posted on 6th November under sitereview
none of those were https hosted!
I think I would be asking a few more questions about this because if
you are limiting this site to publicly available information I
cannot understand the requirement for a secure server.
Does GoDaddy host https and http out of the same server folder? If they don’t (and it would be extremely odd if they did) then you can redirect the entire domain from non-secure to secure with a single .htaccess file.
Redirect 301 / https://your.domain.com/
Put that in a text file, name it .htaccess (you’ll have to do that part on the server) and Bob’s your uncle. With that file in your httpdocs folder, and all your site files in the httpsdocs folder, the entire site will be served out of the secure folder, even if it wasn’t requested from there.
great - now to upload to that folder in freeway - do I need to change
anything/? I will also contact godaddy how to redirect to the
httpsfolder?
I hate to ask… bobs your uncle? huh??
J
On Nov 10, 2009, at 8:57 PM, waltd wrote:
Does GoDaddy host https and http out of the same server folder? If
they don’t (and it would be extremely odd if they did) then you can
redirect the entire domain from non-secure to secure with a
single .htaccess file.
Redirect 301 / https://your.domain.com/
Put that in a text file, name it .htaccess (you’ll have to do that
part on the server) and Bob’s your uncle. With that file in your
httpdocs folder, and all your site files in the httpsdocs folder,
the entire site will be served out of the secure folder, even if it
wasn’t requested from there.
Use an FTP application to look at your GoDaddy account folder. You will almost always be able to see at least one “level” above the folder where you put your files. So if there are two folders that are named similarly, like httpdocs and httpsdocs (that’s what Rackspace calls them) then by deduction you can figure out which one serves the secure site and which one does not. So in Freeway, you would change the Directory setting in the Upload dialog to match the path to the secure folder.
and thanks for the article… I thought something like dave explained…
and this…too… Had a feeling it was a british saying…
J
On Nov 10, 2009, at 9:22 PM, waltd wrote:
Use an FTP application to look at your GoDaddy account folder. You
will almost always be able to see at least one “level” above the
folder where you put your files. So if there are two folders that
are named similarly, like httpdocs and httpsdocs (that’s what
Rackspace calls them) then by deduction you can figure out which one
serves the secure site and which one does not. So in Freeway, you
would change the Directory setting in the Upload dialog to match the
path to the secure folder.
the front page can not go secure unless I rewrite code to have it
such… ???
walter
there are no folders because it is a shared server and I can not do
what you recommended…
Do the page names (atttorneyprofile.html) do those have to be changed
or just the links on the pages…
sigh… always a learning experience…
J
On Nov 10, 2009, at 8:57 PM, waltd wrote:
Does GoDaddy host https and http out of the same server folder? If
they don’t (and it would be extremely odd if they did) then you can
redirect the entire domain from non-secure to secure with a
single .htaccess file.
Redirect 301 / https://your.domain.com/
Put that in a text file, name it .htaccess (you’ll have to do that
part on the server) and Bob’s your uncle. With that file in your
httpdocs folder, and all your site files in the httpsdocs folder,
the entire site will be served out of the secure folder, even if it
wasn’t requested from there.
Hrm. That’s a careful non-answer you have there. A shared server has nothing at all to do with where they define your secure web root to be. You will not need to change anything about your site if the following works, a relative link will always work because it relates to the page that was sending it on to the next page.
TRY this (I have my doubts it will work on GD, but baby steps, right?):
Edit your .htaccess file to read thusly:
RewriteEngine On
RewriteCond %{SERVER_PORT} !^443$
RewriteRule .* https://%{SERVER_NAME}%{REQUEST_URI} [R,L]
What this does is check every request made of the server to see if it came in under the secure port (443) rather than the normal 80. If it did, nothing happens. If it did not, the server makes a full external redirect to the requested URL under the https:// protocol. You won’t need to change anything at all about your site if this file (named .htaccess) is present in your site folder (and GoDaddy isn’t acting capriciously, which has been my sad experience there on many occasions).
If this is going to fail, it will fail spectacularly, as in Error 500, no pages are displayed ever. If that’s the case, delete the .htaccess file and try to convince your client to move to a provider that isn’t so odd, or to give up this idea that the pages have to be sent securely.
I frankly find that “requirement” to be extremely strange, bordering on someone playing a game of telephone here, where someone said one thing and it came out different on the other end. What I imagine is true is that any FORMS need to be sent under SSL protection, so as to dissuade wiretapping of privileged client-attorney communication. But to say that all PAGES need to be sent to the great wide open Internet under SSL protection is quite ridiculous.
Spectacular…
I made the .htaccess file
saved it as: .htaccess
put in it:
RewriteEngine On
RewriteCond %{SERVER_PORT} !^443$
RewriteRule .* https://%{SERVER_NAME}%{REQUEST_URI} [R,L]
w the sqiggles ( if these are not needed… let me know)
and got:
Internal Server Error
The server encountered an internal error or misconfiguration and was
unable to complete your request.
Please contact the server administrator, email@hidden
and inform them of the time the error occurred, and anything you might
have done that may have caused the error.
More information about this error may be available in the server error
log.
Thank you… so…
On Nov 11, 2009, at 11:32 AM, waltd wrote:
Hrm. That’s a careful non-answer you have there. A shared server has
nothing at all to do with where they define your secure web root to
be. You will not need to change anything about your site if the
following works, a relative link will always work because it relates
to the page that was sending it on to the next page.
TRY this (I have my doubts it will work on GD, but baby steps,
right?):
Edit your .htaccess file to read thusly:
RewriteEngine On
RewriteCond %{SERVER_PORT} !^443$
RewriteRule .* https://%{SERVER_NAME}%{REQUEST_URI} [R,L]
What this does is check every request made of the server to see if
it came in under the secure port (443) rather than the normal 80. If
it did, nothing happens. If it did not, the server makes a full
external redirect to the requested URL under the https:// protocol.
You won’t need to change anything at all about your site if this
file (named .htaccess) is present in your site folder (and GoDaddy
isn’t acting capriciously, which has been my sad experience there on
many occasions).
If this is going to fail, it will fail spectacularly, as in Error
500, no pages are displayed ever. If that’s the case, delete
the .htaccess file and try to convince your client to move to a
provider that isn’t so odd, or to give up this idea that the pages
have to be sent securely.
I frankly find that “requirement” to be extremely strange, bordering
on someone playing a game of telephone here, where someone said one
thing and it came out different on the other end. What I imagine is
true is that any FORMS need to be sent under SSL protection, so as
to dissuade wiretapping of privileged client-attorney communication.
But to say that all PAGES need to be sent to the great wide open
Internet under SSL protection is quite ridiculous.
where do I put the html code so I have symbol at the bottom of the page?
J
On Nov 11, 2009, at 11:32 AM, waltd wrote:
Hrm. That’s a careful non-answer you have there. A shared server has
nothing at all to do with where they define your secure web root to
be. You will not need to change anything about your site if the
following works, a relative link will always work because it relates
to the page that was sending it on to the next page.
TRY this (I have my doubts it will work on GD, but baby steps,
right?):
Edit your .htaccess file to read thusly:
RewriteEngine On
RewriteCond %{SERVER_PORT} !^443$
RewriteRule .* https://%{SERVER_NAME}%{REQUEST_URI} [R,L]
What this does is check every request made of the server to see if
it came in under the secure port (443) rather than the normal 80. If
it did, nothing happens. If it did not, the server makes a full
external redirect to the requested URL under the https:// protocol.
You won’t need to change anything at all about your site if this
file (named .htaccess) is present in your site folder (and GoDaddy
isn’t acting capriciously, which has been my sad experience there on
many occasions).
If this is going to fail, it will fail spectacularly, as in Error
500, no pages are displayed ever. If that’s the case, delete
the .htaccess file and try to convince your client to move to a
provider that isn’t so odd, or to give up this idea that the pages
have to be sent securely.
I frankly find that “requirement” to be extremely strange, bordering
on someone playing a game of telephone here, where someone said one
thing and it came out different on the other end. What I imagine is
true is that any FORMS need to be sent under SSL protection, so as
to dissuade wiretapping of privileged client-attorney communication.
But to say that all PAGES need to be sent to the great wide open
Internet under SSL protection is quite ridiculous.
No squiggles. They are there to render the code in the Web forum.
Walter
On Nov 11, 2009, at 11:48 AM, julie maxwell allen wrote:
Spectacular…
I made the .htaccess file
saved it as: .htaccess
put in it:
RewriteEngine On
RewriteCond %{SERVER_PORT} !^443$
RewriteRule .* https://%{SERVER_NAME}%{REQUEST_URI} [R,L]
w the sqiggles ( if these are not needed… let me know)
and got:
Internal Server Error
The server encountered an internal error or misconfiguration and was
unable to complete your request.
Please contact the server administrator, email@hidden
and inform them of the time the error occurred, and anything you
might have done that may have caused the error.
More information about this error may be available in the server
error log.
Thank you… so…
On Nov 11, 2009, at 11:32 AM, waltd wrote:
Hrm. That’s a careful non-answer you have there. A shared server
has nothing at all to do with where they define your secure web
root to be. You will not need to change anything about your site if
the following works, a relative link will always work because it
relates to the page that was sending it on to the next page.
TRY this (I have my doubts it will work on GD, but baby steps,
right?):
Edit your .htaccess file to read thusly:
RewriteEngine On
RewriteCond %{SERVER_PORT} !^443$
RewriteRule .* https://%{SERVER_NAME}%{REQUEST_URI} [R,L]
What this does is check every request made of the server to see if
it came in under the secure port (443) rather than the normal 80.
If it did, nothing happens. If it did not, the server makes a full
external redirect to the requested URL under the https:// protocol.
You won’t need to change anything at all about your site if this
file (named .htaccess) is present in your site folder (and GoDaddy
isn’t acting capriciously, which has been my sad experience there
on many occasions).
If this is going to fail, it will fail spectacularly, as in Error
500, no pages are displayed ever. If that’s the case, delete
the .htaccess file and try to convince your client to move to a
provider that isn’t so odd, or to give up this idea that the pages
have to be sent securely.
I frankly find that “requirement” to be extremely strange,
bordering on someone playing a game of telephone here, where
someone said one thing and it came out different on the other end.
What I imagine is true is that any FORMS need to be sent under SSL
protection, so as to dissuade wiretapping of privileged client-
attorney communication. But to say that all PAGES need to be sent
to the great wide open Internet under SSL protection is quite
ridiculous.