samedi 2 avril 2016

HTTPS for custom domain on blogger

in a normal case it is easy to turansform your blogger website from http to https but you are forced to use blogspot.com/blogspot.in/blogspot.ca... as top-level domains. (for exemple http://website.blogspot.com will be https://website.blogspot.com) cloudflare logo

Custom domain name on Blogger

Blogger uses CNAME technique to make your blog appears with personal domain name but you can get only the "www.website.com" edition or an other subdomain "blog.website.com" https://support.google.com/blogger/troubleshooter/1233381?hl=en

HTTPS for custom domain blogger

blogspot server force users to use blogspot.com/blogspot.in/blogspot.ca... as top-level domains to get HTTPS connection. If you choose to use your own domain you will find on your blogspot panel this notification:

****Warning: HTTPS is currently not available for custom domain blogs.

SSL Flexible from CloudFlare

ssl flexible cloudflare SSL Flexible from CloudFlare is the best solution to add secure connection on blogspot:

Flexible SSL: secure connection between your visitor and CloudFlare, but no secure connection between CloudFlare and your web server. You don't need to have an SSL certificate on your web server, but your visitors still see the site as being HTTPS enabled. This option is not recommended if you have any sensitive information on your website. It should only be used as a last resort if you are not able to setup SSL on your own web server, but it is less secure than any other option (even “Off”), and could even cause you trouble when you decide to switch away from it...

    If you use Blogger and want to use Cloudflare's free SSL service then your only option is Flexible SSL. Be aware that with this option the content is only encrypted from Cloudflare to the end-user. Calling it "Halfway SSL" or "Cosmetic SSL" would be technically correct but probably bad for marketing. While it is ideal to have an end-to-end HTTPS connection, securing the connection from the browser to CloudFlare mitigates 99% of the real risk. A way to think about it is if you're worried about the government monitoring your web traffic, Flexible SSL won't offer a complete solution. On the other hand, if you're worried about someone next to you in the coffee shop sniffing your cookie or password information, CloudFlare's Flexible SSL will protect you.

  1. CloudFlare SSL options
  2. How do I fix the infinite redirect loop error after enabling Flexible SSL with WordPress?
  3. Enable SSL on Tumblr, WordPress, Blogger, AppEngine...

Why making blogs for my proxy site?!

It's easy to build a blog specially on blogspot and it is one of best practice to get traffic from search. It's great for user experience because you can explain and provide more useful information about proxy service...

Cloudflare's Universal SSL service

Despite the lack of SSL support on Google's side, I signed up this blog for Cloudflare's Universal SSL service. It's not an ideal solution and it smacks of security theater, but that's not Cloudflare's fault and it's outside of their control. But unless I have a free week I can dedicate to researching alternatives and then relocating content, I need to wait until Google does the needful and makes SSL available to those of us using Blogger.

1 commentaire:

  1. Hello dear admin,

    How are you ? I think you very well. Thanks for sharing this awesome blog.Like the large majority of Australian parents, you might be faced with decision of whether to place your child in day care. Choosing the right facility is highly important and for your convenience, I have outlined the various options available to parents today.Look about-certificate iii in child care


    Best regards
    Georgia Zara

    RépondreSupprimer

Popular Posts

Recent Posts

Pages