> > why doesn't your site redirect http to https Please don't; if we want https, we can[1] do that redirection on the browser side; doing it on the server side

> > why doesn't your site redirect http to https Please don't; if we want https, we can[1] do that redirection on the browser side; doing it on the server side means your site doesn't work[0] with user agents that don't include whatever random cryptographic code your site has decided to make de-facto mandatory. > I figure that people can go to https directly if it's important to them. Exactly, thank you. 0: because `GET /whatever` no longer returns a http response body; the fact that the status code is 3xx rather than 200 OK or the presence of a Location header isn't directly relevant. 1: Obviously it's good to support https in addition to http; it's not supporting http that's a problem.