Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ " (two rows, without the "). That should create a redirect https + ⇒ https + Or switch both values to use the non-After all redirects, all users (and search engines) should see the same https url: Non-Add a redirect http ⇒ https, so every connection is secure. Same with HttpOnly - without https that's only decorative.ĪSP.NET_SessionId=dbwcvtgq1gohb1nbjj3tfzbe path=/ HttpOnly SameSite=LaxĪSP.NET_SessionId=0cdbb02t0dfdpujce54hef4j path=/ HttpOnly SameSite=LaxĪSP.NET_SessionId=qin3xxrisqufthncaiflfzvi path=/ HttpOnly SameSite=LaxĪSP.NET_SessionId=q0qbdq5ru0ubkvlugepswq50 path=/ HttpOnly SameSite=LaxĬookie sent via https, but not marked as secureĪSP.NET_SessionId=fgwpezxfqxf31hmpl2wtka5n path=/ HttpOnly SameSite=LaxĪSP.NET_SessionId=dqsnwikktoezhnbfcs0qw334 path=/ HttpOnly SameSite=LaxĮrror - no preferred version Perhaps in your port 443 vHost something like "RewriteEngine on" + "RewriteCond % " (three rows, without the "). If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Never send Cookies / Session-Cookies via http.
![moi3d loop select moi3d loop select](http://k4icy.50webs.com/tutorials/trans_indent_02_project-shape-to-surface.jpg)
Good: All urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset)ĪSP.NET_SessionId=viaz0taxkvjkuwgyizn2iewt path=/ HttpOnly SameSite=Laxįatal: Cookie sent via http. Check to learn some basics about the Google-Preload-List. Domain never included in the Preload-list. Good: Every cookie has a SameSite Attribute with a correct value Strict/Lax/None Good: No asked Authoritative Name Server had a timeout So every domain name should have an ipv6 address. Ipv6 is the future with a lot of new features. Warning: Only one ip address found: has only one ip address.
![moi3d loop select moi3d loop select](https://devtalk.blender.org/uploads/default/original/3X/0/8/089a4cc745342b60653c0a9c292e87402bc9ad27.png)
Good: All ip addresses are public addresses Name "" is domain, public suffix is ".nl", top-level-domain is ".nl", top-level-domain-type is "country-code", Country is Netherlands (the), tld-manager is "SIDN (Stichting Internet Domeinregistratie Nederland)", num. General Results, most used to calculate the result Set-Cookie: ASP.NET_SessionId=dqsnwikktoezhnbfcs0qw334 path=/ HttpOnly SameSite=Laxġ. Set-Cookie: ASP.NET_SessionId=qin3xxrisqufthncaiflfzvi path=/ HttpOnly SameSite=Lax
![moi3d loop select moi3d loop select](https://i.ytimg.com/vi/S9RL48RJDHY/maxresdefault.jpg)
Set-Cookie: ASP.NET_SessionId=0cdbb02t0dfdpujce54hef4j path=/ HttpOnly SameSite=Lax Set-Cookie: ASP.NET_SessionId=fgwpezxfqxf31hmpl2wtka5n path=/ HttpOnly SameSite=Lax Set-Cookie: ASP.NET_SessionId=q0qbdq5ru0ubkvlugepswq50 path=/ HttpOnly SameSite=Lax Set-Cookie: ASP.NET_SessionId=dbwcvtgq1gohb1nbjj3tfzbe path=/ HttpOnly SameSite=LaxĬertificate error: RemoteCertificateNameMismatch Set-Cookie: ASP.NET_SessionId=viaz0taxkvjkuwgyizn2iewt path=/ HttpOnly SameSite=Lax