3 ms·
Just start them off with HTTP and transparently upgrade to HTTPS after 9 hours. And if you're only retaining a small percentage of users who sign up, you can st
by Ajedi32 10y ago
Just start them off with HTTP and transparently upgrade to HTTPS after 9 hours. And if you're only retaining a small percentage of users who sign up, you can stretch that limit even further by only upgrading the users who you retain.
- Sephr 10y agoThis isn't possible in a properly deployed HTTPS site, since it would already have an HSTS header with includeSubdomains.