Blogspot Blogs Cannot Endure Shared, Using Www
Thursday, October 25, 2018
Edit
We're seeing a issue of reports from spider web log owners, claiming their blogs are straight off bailiwick to safety alerts - too blocked when sharing.
Frequently, the reports involve blogs published to "blogspot.com" (not custom domains) - too using the "www" alias.
Some services, such equally FaceBook, are straight off requiring "https" for shared URLs - too the "www" alias of "blogspot.com" ("www.whatever.blogspot.com") can't move used, amongst the "https" protocol.
When Blogger started providing HTTPS for our blogs, nosotros observed that "https://www.whatever.blogspot.com" was a problem.
HTTPS is non an automatic characteristic for blogs too websites, exterior Google space. H5N1 spider web log or website requires an SSL certificate, to furnish HTTPS connectivity - too the certificates are by too large non free.
An SSL certificate is URL specific.
Google straight off provides SSL certificates, gratuitous of charge, to whatsoever Blogger spider web log owner, when "HTTPS Availability" is enabled - but the certificates exclusively back upwards "whatever.blogspot.com".
Unfortunately, Google SSL certificates don't back upwards "www.whatever.blogspot.com". Google generosity has limits - too Blogger in all probability decided that "www.whatever.blogspot.com" was non used enough, past times spider web log owners, to justify the certificate cost.
This is what my readers would see, for "https://www.nitecruzr-test-ssl.blogspot.com".
Sharing, using the "www" alias, volition campaign an mistake display.
If I part "nitecruzr-test-ssl.blogspot.com", it has to move shared equally "nitecruzr-test-ssl.blogspot.com". The "www" alias, "https://www.nitecruzr-test-ssl.blogspot.com", volition generate a privacy alert, when the shared link is clicked.
If the spider web log is published to a custom domain, the spider web log should move shared equally "https://www.whatever.com". With a custom domain involved, "https://whatever.blogspot.com" tin sack all the same move used - but "https://www.whatever.blogspot.com" should non move used.
Now that HTTPS is a reality for all #Blogger blogs, spider web log owners volition come across a work accessing their blogs using the "www" alias of the "blogspot.com" URL. This restriction applies to custom domain published blogs also, when the "blogspot" URL is used. The "blogspot.com" URL volition all the same redirect, automatically, to a published domain URL - but the "www" alias of the "blogspot.com" URL volition non work.
All "blogspot.com" URLs volition bring to move shared, without the "www" alias.
Frequently, the reports involve blogs published to "blogspot.com" (not custom domains) - too using the "www" alias.
Some services, such equally FaceBook, are straight off requiring "https" for shared URLs - too the "www" alias of "blogspot.com" ("www.whatever.blogspot.com") can't move used, amongst the "https" protocol.
When Blogger started providing HTTPS for our blogs, nosotros observed that "https://www.whatever.blogspot.com" was a problem.
HTTPS is non an automatic characteristic for blogs too websites, exterior Google space. H5N1 spider web log or website requires an SSL certificate, to furnish HTTPS connectivity - too the certificates are by too large non free.
An SSL certificate is URL specific.
Google straight off provides SSL certificates, gratuitous of charge, to whatsoever Blogger spider web log owner, when "HTTPS Availability" is enabled - but the certificates exclusively back upwards "whatever.blogspot.com".
Unfortunately, Google SSL certificates don't back upwards "www.whatever.blogspot.com". Google generosity has limits - too Blogger in all probability decided that "www.whatever.blogspot.com" was non used enough, past times spider web log owners, to justify the certificate cost.
This is what my readers would see, for "https://www.nitecruzr-test-ssl.blogspot.com".
Sharing, using the "www" alias, volition campaign an mistake display.
If I part "nitecruzr-test-ssl.blogspot.com", it has to move shared equally "nitecruzr-test-ssl.blogspot.com". The "www" alias, "https://www.nitecruzr-test-ssl.blogspot.com", volition generate a privacy alert, when the shared link is clicked.
Your connector is non private
Attackers mightiness move trying to pocket your information from www.nitecruzr-test-ssl.blogspot.com (for example, passwords, messages, or credit cards). Learn more
If the spider web log is published to a custom domain, the spider web log should move shared equally "https://www.whatever.com". With a custom domain involved, "https://whatever.blogspot.com" tin sack all the same move used - but "https://www.whatever.blogspot.com" should non move used.
Now that HTTPS is a reality for all #Blogger blogs, spider web log owners volition come across a work accessing their blogs using the "www" alias of the "blogspot.com" URL. This restriction applies to custom domain published blogs also, when the "blogspot" URL is used. The "blogspot.com" URL volition all the same redirect, automatically, to a published domain URL - but the "www" alias of the "blogspot.com" URL volition non work.
All "blogspot.com" URLs volition bring to move shared, without the "www" alias.