HTTPS - Always active?
Posted: Tue Aug 11, 2009 7:57 pm
hey so, i am relatively new to web servers (and their security), so i figured id get a working https connection (my browsers shows 128bit encryption) that apparently encrypts all data passed through it (also i have ssl certificate applied to my domain and ip address, and the browser shows no errors (i see the golden padlock))
hooray..! it looks real great n dandy n all, but is there any drawbacks to using this?
RewriteEngine On
RewriteCond %{HTTPS} !on
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}
this code in .htaccess forces the server to apply it to the directory,
IF i were to set it to my root directory (thus applying https my entire site) would i run into problems? or is it best to just use when the function calls for security???
personally i enjoy the look of having the padlock (and in most browsers, the altered address bar color) so i would rather have https active all the time
lastly; maybe someone could answer these related questions:
- does my data pass through the company i got my ssl in transit? (i am NOT using a temporary key)
- will this cause data flow to be slower?
- IS HTTPS / SSL actually secure, or do i need another layer, in other words - would https suffice?
any advice would be most helpful :)
regards
hooray..! it looks real great n dandy n all, but is there any drawbacks to using this?
RewriteEngine On
RewriteCond %{HTTPS} !on
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}
this code in .htaccess forces the server to apply it to the directory,
IF i were to set it to my root directory (thus applying https my entire site) would i run into problems? or is it best to just use when the function calls for security???
personally i enjoy the look of having the padlock (and in most browsers, the altered address bar color) so i would rather have https active all the time
lastly; maybe someone could answer these related questions:
- does my data pass through the company i got my ssl in transit? (i am NOT using a temporary key)
- will this cause data flow to be slower?
- IS HTTPS / SSL actually secure, or do i need another layer, in other words - would https suffice?
any advice would be most helpful :)
regards