HTTPS
Updated
Reviewedbyfl
🔒
Green locks, less drama.
Zero-config TLS certificates for all domains at no additional costs are provided. Read on if you want to learn about advanced options.
HTTPS on fortrabbit
Every correctly routed external domain gets a TLS certificate, without any setup. Default domains and cloud domains are always served over HTTPS. Certificates renew automatically.
HTTPS options
The following tips apply to all TLS options on fortrabbit:
Redirect all requests to HTTPS
It is recommended to forward all requests to the secure line, so no more "http://", only "https://". You can do that with .htaccess, see htaccess redirects.
Secure your domain with a CAA record
A Certification Authority Authorization (CAA) is a DNS record to specify which certificate authorities (CAs) are allowed to issue certificates for a domain. No additional setup is required on fortrabbit. See if your DNS / domain provider supports CAA entries, set the according identifying domain name. For the free Let's Encrypt certs, see the Let's Encrypt CAA docs. Mind that already existing CAA entries can also become a problem when trying to issue new certificates.
About HTTPS, TLS & SSL
HTTPS is Hypertext Transfer Protocol Secure. It is used to secure the data transport between a client (browser) and a server. HTTPS is based on TLS (Transport Layer Security), the successor to the still better known SSL (Secure Sockets Layer). HTTPS is considered a standard must have for each website. Browsers show a lock in the address bar if the connection is over HTTPS.
Troubleshooting HTTPS
The HTTPS troubleshooting guide covers certificate warnings and mixed content.