为什么Safari是唯一不安全的浏览器，将我的HTTPS网站标记为不安全
我最近为客户的业务创建了一个网站。我们从Godaddy购买并设置了OV SSL证书，这与我们托管的平台相同。但是由于某种原因，野生动物园正在将整个站点标记为不安全，而Chrome和Edge则说明了整个网站的安全。网站上的所有链接都有HTTPS前缀，并且所有图像均在服务器上托管。它只是一个宣传他的业务的小型网站，大约有5页。为什么Safari将网站标记为不安全？请帮忙。
I recently created a website for my client's business. We bought and setup an OV SSL certificate from GoDaddy, the same platform we're hosting on. But for some reason, Safari is flagging the whole site as not secure, whilst Chrome and Edge are saying its secure. All the links on the website have an HTTPS prefix and all the images are hosted on the server. Its only a small website advertising his business, its got about 5 pages. Why is Safari flagging the site as not secure? Please help.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（3）
当键入地址或主机名时，浏览器自动完成URL架构。当前，有些浏览器自动完成至
https：//，而有些浏览器仍然可以自动完成到> http：//。后者似乎是野生动物园。因此，实际上，Safari将您的 http 网站标记为不安全，这是预期的。
几年来，浏览器供应商一直在默认情况下过渡到加密，采取了越来越严格的措施，例如默认情况下在HTTPS上连接。
hsts preload list 还指定仅在安全连接上连接哪些主机。如果可以在该列表中找到“主机名”中的键入，Safari可能会使用
https：//自动完成URL。安装证书时，通常可以在两个方案上连接网站。因此，人们将将301重定向从
http添加到https以强迫每个人使用加密连接。您的配置中缺少此重定向。通常，可以在Web Hoster的配置页面中使用简单的复选框激活它。除了模式外，在重定向期间保留请求的所有其他部分是最好的做法，以便现有链接仍然有效。例如
http://example.com/test.html将重定向到https://example.com/test.htmlBrowsers auto-complete the URL schema when an address or hostname is typed in. Currently, there are some browsers auto-completing to
https://, while some still autocomplete tohttp://. The latter seems to be the case with Safari.So actually, Safari is marking your http website as unsecure, which is as expected.
For several years now browser vendors have been transitioning to encryption by default, taking increasingly strict measures to do so, like connecting on https by default.
The HSTS preload list also specifies which hosts should be connected to on secure connections only. Safari will probably autocomplete the URL with
https://if the typed in hostname can be found in that list.A website usually can be reached on both schemes when a certificate is installed. So one would add a 301 redirect from
httptohttpsto force every one to use the encrypted connection. This redirect is missing in your configuration. Often, it can be activated with a simple checkbox in the web hoster’s configuration pages.It is best practice to preserve all other parts of the request during the redirect, except the schema, so that existing links still work. e.g.
http://example.com/test.htmlwould redirect tohttps://example.com/test.html您可以尝试在当前网络上禁用IPv6，只是检查是否与IPv6有关。
在Mac上，您可以通过 系统偏好 - ＆gt; network-＆gt; {yourConnection} - ＆gt; advaned-＆gt; tcp/ip 和更改来禁用IPv6。 IPv6 到手动
You can try disabling IPv6 on your current network, just to check if this is related to IPv6.
On Mac you can disable IPv6 by going System Preferences->Network->{YourConnection}->Advaned->TCP/IP, and change IPv6 to Manually
我写作是安迪答案的扩展。
为了将所有流量重定向到HTTPS，您可以将以下行添加到.htaccess文件中：
I am writing as an extension to Andy's answer.
In order to redirect all the traffic to https you can add the following lines into your .htaccess file: