4 ms·
I suppose previous poster meant that WP should default to offer its service over HTTPS, i.e. when you first connect over HTTP, the site immediately redirects yo
by ptaipale 11y ago
I suppose previous poster meant that WP should default to offer its service over HTTPS, i.e. when you first connect over HTTP, the site immediately redirects you to a HTTPS connection. Like e.g. this site (HN) does (connecting to http://news.ycombinator.com/ http://news.ycombinator.com/ gives you 301 Moved Permanently, location https://news.ycombinator.com/ https://news.ycombinator.com/ ).
- Symbiote 11y agoThe better solution is HSTS, which would tell the browser to use HTTPS for the site for the next year. The main browsers come with a list of known HSTS sites, so you'll never use HTTP to access google.com (etc). https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security