Skip to main content

SSL and the "www" alias of "blogspot.com"

Last month, we observed that SSL, though generally available for blogs published to "blogspot.com", did not work for all such blogs.

Owners of blogs who used the "www" alias of "blogspot.com", such as my BlogSpot mirror blog "https://blogger-status-for-real.blogspot.com/", reported annoying error messages, when trying to access the "www" alias of the blog, using SSL.
Your connection is not private

For my BlogSpot mirror blog, you'll see the problem, when viewing "https://www.blogger-status-for-real.blogspot.com/". The problem apparently involves the SSL certificate for "blogspot.com", which does not include the "www" aliase for the subdomains (such as "blogger-status-for-real.blogspot.com").

This month, Blogger decided to drop support for the "www" alias of "blogspot.com", when using SSL.

This means that you can have either SSL for your "blogspot.com" published blog - or you can let your blog be referenced using the "www" alias - but you cannot have both. "https://www.blogger-status-for-real.blogspot.com/" will simply not be available.


Nobody can access my test blog - without some scary decisions - and extra work.


A blog with an invalid certificate, when SSL access is attempted, can be accessed - but not using SSL. The browser, that the reader is using, will not connect to a website with an invalid certificate, using SSL.


The link to the blog is there - if you look for it. How many would be readers will willingly connect to the unsafe non SSL connection?


If the blog uses HSTS, instead of HTTPS, a connection will not be available, period.


This is my mirror blog. It, too, is not accessible using SSL.



My mirror blog, however, uses HSTS - and HSTS does not offer an insecure access option. Blogs which use HSTS won't be accessible, period, insecurely.


If you're going to offer SSL access to your blog, your readers won't be happy, using the "www" alias - if the alias works, at all.

Comments

Popular posts from this blog

Custom Domain Migration - Managing The Traffic

Your blog depends upon traffic for its success.

Anything that affects the traffic to your blog, such as any change in the URL, affects the success of your blog. Publishing the blog to a custom domain, like renaming the blog, will affect traffic to your blog. The effects of the change will vary from blog to blog, because of the different traffic to every different blog.Followers. People who find your blog because of recommendations by other people.Search engines. Robotic processes which methodically surf your blog, and provide dynamic indexing to people who search for information.Subscribers. People who read your content from their newsfeed reader, such as the dashboard Reading List.Viewers. People who read your content from their browser.No two blogs are the same - and no two blogs will have the same combinations of traffic sources.

Stats Components Are Significant, In Their Own Context

One popular Stats related accessory, which displays pageview information to the public, is the "Popular Posts" gadget.

Popular Posts identifies from 1 to 10 of the most popular posts in the blog, by comparing Stats pageview counts. Optional parts of the display of each post are a snippet of text, and an ever popular thumbnail photo.

Like many Stats features, blog owners have found imaginative uses for "Popular Posts" - and overlook the limitations of the gadget. Both the dynamic nature of Stats, and the timing of the various pageview count recalculations, create confusion, when Popular Posts is examined.