4 ms·
> If we forward HTTP requests to HTTPS and use HSTS Right, I think his point there was, the ecosystem has to make many changes to ensure the links are the "sec
by eatbitseveryday 10y ago
> If we forward HTTP requests to HTTPS and use HSTS
Right, I think his point there was, the ecosystem has to make many changes to ensure the links are the "secure version": we create URLs with https, make browser changes to redirect (HSTS), use redirect in server software, etc.
With "just" HTTP, all URLs are uniform, but the protocol is modified upon connection to 'upgrade' the link to something secure, instead. HSTS maybe wouldn't be needed (or would take a slightly different form).