Does Web Designer know about using "https" instead of "http" and does doing that present any problems. For instance, when adding a link, the program corrects www.abc.com to http://www.abc.com. Can that be changed so that it defaults to https?
Printable View
Does Web Designer know about using "https" instead of "http" and does doing that present any problems. For instance, when adding a link, the program corrects www.abc.com to http://www.abc.com. Can that be changed so that it defaults to https?
No. To be able to use https:// the site must have a SSL certificate.
From my web host's C-Panel
Quote:
The SSL/TLS Manager will allow you to generate SSL certificates, certificate signing requests, and private keys. These are all parts of using SSL to secure your website. SSL allows you to secure pages on your site so that information such as logins, credit card numbers, etc are sent encrypted instead of plain text. It is important to secure your site’s login areas, shopping areas, and other pages where sensitive information could be sent over the web.
And I should point out, like domain names, SSL certificates cost money and need to be renewed each year. Unless you require a secured link, for example you have a blog or are making sales from your site, you probably do not need a SSL certificate.
I do have an SSL certificate and I do plan to use https. I'm asking what is the compatibly of Web Designer with https?Quote:
Originally Posted by gwpriester
That is not a matter of Xara. Xara creates static files that don't care if they are transferred via http or https.
If you are worried clicking an internal link might be broken when the page is opened via https you don't need to be. All internal links are releative and retain the protocol.
I don't think you can change the default of the automatic address correction to https. But that should not be a big problem. You should provide it anyway because http://xyz might reference a completely different site than https://xyz
As siran says, the internal URL links generated by xara are relative, so index.htm links to aboutus.htm not http://www.xyz.com/aboutus.htm so if you visit https://www.xyz.index.htm the https is preserved.
However, if you visit your pages on https and they include images or widgets etc. that are from non-https sites you will get browser warnings, so make sure you haven't got any of those.
Once you are happy that's okay, you need to set about making incoming links https.
First, update the sitemap to use HTTPS instead of http.
If you are signed up to Google search console, you can submit your new sitemap in there.
Then, if you are on an apache server, you can update your .htaccess file to permanently redirect all pages to HTTPS automatically. There are various posts on the internet but I can post code here if you like.
Its best to do sitemap and not to just rely on htaccess method as otherwise each initial page load would still require a redirect and Google frowns upon this!
Thanks sculptex, that was very helpful. I'll get back to you later if I have questions.
Above the Link box, check that the Correct automatically box is unticked.
Then enter the https//:<external_url> in full. For the others, Xara knows where it is.
Acorn
Gary,
https://letsencrypt.org/ is very interesting and is free. The only thing is it is designed for servers that are Linux based so sites on windows servers would have to go the traditional routes for the SSL Certificates.
Ray
Ray, have you got any example sites you have used with this SSL provider?Quote:
Originally Posted by RKissane
Acorn
My company's web site is supposedly using this, www.p-s-s.com. My hosting service says they use it on several different servers and sites without any problems.
Ray
Cheers,Quote:
Originally Posted by RKissane
Acorn
Hello everyone,
I agree. The following links are about how to implement Let's Encrypt SSL more easily:
Easier deployment:
https://certbot.eff.org/
If you have a VPS and use VirtualMin:
https://techjourney.net/how-to-use-l...ualmin-webmin/
Quote:
Originally Posted by RKissane
sculptex.co.uk uses LetsEncryot SSL
Many Linux hosting companies that offer cpanel now have it included in their packages you might not even realize!
Its free and pretty easy to install, on my hosting, I simply click the LetsEncrypt icon in cPanel, then select the domain (or subdomain etc.) from the dropdown list and click install. 30 seconds later its installed and automatically renews every 90 days!
I'll never bother with another SSL provider unless I need an EV certificate (extended validation) that verifies and shows company information and displays with a nice extra secure looking green bar on most browsers.
Actually, if you click the green padlock that site uses comodo.Quote:
Originally Posted by RKissane
I use siteground.com for the majority if my websites hosting and their hosting includes LetsEncrypt SSL by default.
I just had an email that they have a 70% labor day sale coming up from 1st to 5th September so I thought it opportune to post here.
I can wholeheartedly recommend them, look for yourself for their reviews online, their support is the best hosting company i've used for the last 14 years!
I will have to ask my hosting company about that. I know they had several issues when we went this route because of some servers crashing and having to change us over to a new server so that may be the reason they are using Comodo. We are not paying extra so as long as it works I really don't care.Quote:
Originally Posted by sculptex
Ray