4 ms·
"I wish Washington Post defaulted to https" This can't be done because if you just type "washingtonpost.com" into your browser or some algorithm creates links
by chetanahuja 11y ago
"I wish Washington Post defaulted to https"
This can't be done because if you just type "washingtonpost.com" into your browser or some algorithm creates links out of plain text (like in an email)... the default is always http:// http:// The internet expects http://yourdomain.tld http://yourdomain.tld to always work.
- ptaipale 11y agoI suppose previous poster meant that WP should default to offer its service over HTTPS, i.e. when you first connect over HTTP, the site immediately redirects you to a HTTPS connection. Like e.g. this site (HN) does (connecting to http://news.ycombinator.com/ http://news.ycombinator.com/ gives you 301 Moved Permanently, location https://news.ycombinator.com/ https://news.ycombinator.com/ ).
- Symbiote 11y agoThe better solution is HSTS, which would tell the browser to use HTTPS for the site for the next year. The main browsers come with a list of known HSTS sites, so you'll never use HTTP to access google.com (etc). https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security