Blogspot Blogs Cannot Hold Upwardly Shared, Using Www
Sunday, September 28, 2014
Edit
We're seeing a issue of reports from weblog owners, claiming their blogs are immediately champaign of study to safety alerts - together with blocked when sharing.
Frequently, the reports involve blogs published to "blogspot.com" (not custom domains) - together with using the "www" alias.
Some services, such every bit FaceBook, are immediately requiring "https" for shared URLs - together with the "www" alias of "blogspot.com" ("www.whatever.blogspot.com") can't move used, alongside the "https" protocol.
When Blogger started providing HTTPS for our blogs, nosotros observed that "https://www.whatever.blogspot.com" was a problem.
HTTPS is non an automatic characteristic for blogs together with websites, exterior Google space. H5N1 weblog or website requires an SSL certificate, to render HTTPS connectivity - together with the certificates are to a greater extent than ofttimes than non not free.
An SSL certificate is URL specific.
Google immediately provides SSL certificates, complimentary of charge, to whatever Blogger weblog owner, when "HTTPS Availability" is enabled - but the certificates exclusively back upwardly "whatever.blogspot.com".
Unfortunately, Google SSL certificates don't back upwardly "www.whatever.blogspot.com". Google generosity has limits - together with Blogger likely decided that "www.whatever.blogspot.com" was non used enough, yesteryear weblog owners, to justify the certificate cost.
This is what my readers would see, for "https://www.nitecruzr-test-ssl.blogspot.com".
Sharing, using the "www" alias, volition crusade an fault display.
If I portion "nitecruzr-test-ssl.blogspot.com", it has to move shared every bit "nitecruzr-test-ssl.blogspot.com". The "www" alias, "https://www.nitecruzr-test-ssl.blogspot.com", volition generate a privacy alert, when the shared link is clicked.
If the weblog is published to a custom domain, the weblog should move shared every bit "https://www.whatever.com". With a custom domain involved, "https://whatever.blogspot.com" tin nevertheless move used - but "https://www.whatever.blogspot.com" should non move used.
Now that HTTPS is a reality for all #Blogger blogs, weblog owners volition run into a employment accessing their blogs using the "www" alias of the "blogspot.com" URL. This restriction applies to custom domain published blogs also, when the "blogspot" URL is used. The "blogspot.com" URL volition nevertheless redirect, automatically, to a published domain URL - but the "www" alias of the "blogspot.com" URL volition non work.
All "blogspot.com" URLs volition convey to move shared, without the "www" alias.
Frequently, the reports involve blogs published to "blogspot.com" (not custom domains) - together with using the "www" alias.
Some services, such every bit FaceBook, are immediately requiring "https" for shared URLs - together with the "www" alias of "blogspot.com" ("www.whatever.blogspot.com") can't move used, alongside the "https" protocol.
When Blogger started providing HTTPS for our blogs, nosotros observed that "https://www.whatever.blogspot.com" was a problem.
HTTPS is non an automatic characteristic for blogs together with websites, exterior Google space. H5N1 weblog or website requires an SSL certificate, to render HTTPS connectivity - together with the certificates are to a greater extent than ofttimes than non not free.
An SSL certificate is URL specific.
Google immediately provides SSL certificates, complimentary of charge, to whatever Blogger weblog owner, when "HTTPS Availability" is enabled - but the certificates exclusively back upwardly "whatever.blogspot.com".
Unfortunately, Google SSL certificates don't back upwardly "www.whatever.blogspot.com". Google generosity has limits - together with Blogger likely decided that "www.whatever.blogspot.com" was non used enough, yesteryear weblog owners, to justify the certificate cost.
Sharing, using the "www" alias, volition crusade an fault display.
If I portion "nitecruzr-test-ssl.blogspot.com", it has to move shared every bit "nitecruzr-test-ssl.blogspot.com". The "www" alias, "https://www.nitecruzr-test-ssl.blogspot.com", volition generate a privacy alert, when the shared link is clicked.
Your connectedness is non private
Attackers mightiness move trying to pocket your information from www.nitecruzr-test-ssl.blogspot.com (for example, passwords, messages, or credit cards). Learn more
If the weblog is published to a custom domain, the weblog should move shared every bit "https://www.whatever.com". With a custom domain involved, "https://whatever.blogspot.com" tin nevertheless move used - but "https://www.whatever.blogspot.com" should non move used.
Now that HTTPS is a reality for all #Blogger blogs, weblog owners volition run into a employment accessing their blogs using the "www" alias of the "blogspot.com" URL. This restriction applies to custom domain published blogs also, when the "blogspot" URL is used. The "blogspot.com" URL volition nevertheless redirect, automatically, to a published domain URL - but the "www" alias of the "blogspot.com" URL volition non work.
All "blogspot.com" URLs volition convey to move shared, without the "www" alias.