4 ms·
If your domain has had HSTS for at least a year (long enough to be recognized by modern browsers) then you should be good. If not, then you'll still need port 8
by panarky 6y ago
If your domain has had HSTS for at least a year (long enough to be recognized by modern browsers) then you should be good. If not, then you'll still need port 80 for redirects.
- rafaelturk 6y agoGood point, we already include HSTS in HTTP responses. Now I'm Thinking what will happen 365 days after we stop serving http..
- LinuxBender 6y agoTo be on the safe side, should consider getting your domain in the preload list [1]. AFAIK not all browsers will try http/443 if a person just types the domain name into the URL bar. Chrome does this. Firefox does not. Unsure about Edge. Your access logs on port 80 should help determine the risk. This is more important for sites that depend on radio/tv advertisement traffic. [1] - https://hstspreload.org/ https://hstspreload.org/