Chrome Error - Force ALWAYS SSL

From 10 minutes, chrome forces an SSL certificate in the subdomains of my site.

My website: https://www.mywebsite.com → SSL OK INSTALLED

Subdomains: http://forum.mywebsite.com → SSL NOT INSTALLED

Now "chrome" makes my forum go through SSL, perhaps because always visit the main site where it is forced to SSL, but that does not make sense. In IE, Firefox, and other versions of Chrome, nothing happens, only on this Chrome PC.

I do not have any extensions installed, as well as an antivirus that forces secure connections such as Kaspersky.

This is taken from the log: chrome: // net-internals / # events

17239: URL_REQUEST 
http://forum.mywebsite.com/ 
Start Time: 10/24/2014 22: 14: 16,596 

t = -633,892 [st = 0] + REQUEST_ALIVE [dt =?] 
                   -> Has_upload = false 
                   -> Is_pending = true 
                   -> Load_flags = 3384432 (BYPASS_DATA_REDUCTION_PROXY | main_frame | MAYBE_USER_GESTURE | VERIFY_EV_CERT) 
                   -> Load_state = 0 (IDLE) 
                   -> Method = "GET" 
                   -> Status = "SUCCESS" 
                   -> Url = "http://forum.mywebsite.com/" 
                   -> Url_chain = ["http://forum.mywebsite.com/","https://forum.mywebsite.com/"]
+4
source share
2 answers

HTTP HTTPS HSTS .

http://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security

, ; , HTTPS.

: , .

, , HTTP. , , HTTPS. , , HTTP, . " " HTTP; , , . HTTPS, , HTTP, , , .

, HSTS (HTTP Strict-Transport-Security) - . (Chrome/Firefox, , Safari IE12 .) .

HSTS . HSTS , http://yoursitehere.com , - ; yoursitehere.com HTTP, HTTPS . .

HSTS. HTTP-, HTTPS. - (Google, Apple, Mozilla, Microsoft) " HSTS", , .

, ; ?

. "includeSubDomains", . includeSubDomains , yoursitehere.com... : www.yoursitehere.com, mail.yoursitehere.com, static.yoursitehere.com ..

, , .

HTTPS ; , , HTTPS- HTTP. HTTPS , .

, , -, -.

, yoursitehere.com/your-application HSTS, / , / , .

Google (Gmail, ..), Twitter, Facebook, Paypal .

+6

, - , .

, ?

0

All Articles