3 ms·
No, he only gets to the point in one of the final paragraphs: The problem is of course that moving things from http: space into https space, whether or no
by sbierwagen 11y ago
No, he only gets to the point in one of the final paragraphs:
The problem is of course that moving things from http: space into
https space, whether or not you keep the rest of the URI the same,
breaks any links to. Put simply, the HTTPS Everywhere campaign
taken at face value completely breaks the web.
Of course, in reality, anyone who moves to HSTS also adds a rewrite rule that redirects incoming http vistors to the https URI. In fact, Let's Encrypt even does it automatically: https://github.com/letsencrypt/letsencrypt/blob/master/letsencrypt-nginx/letsencrypt_nginx/configurator.py#L384 https://github.com/letsencrypt/letsencrypt/blob/master/letse...
His complaint is completely spurious.