3 ms·
Just to be clear, no web browser has ever (AFAIK) allowed a navigation for https:// https:// to downgrade to http:// http://. It's only when the protocol is not
by iancarroll 6y ago
Just to be clear, no web browser has ever (AFAIK) allowed a navigation for https:// https:// to downgrade to http:// http://. It's only when the protocol is not explicit (i.e. typing only "domain.com") do problems really arise.
- meowface 6y agoThey may have meant finding a link to it elsewhere from a plaintext site, in which case they could sslstrip it. (Before more modern safeguards, at least.)