3 ms·
Don't modern browsers automatically redirect http to https?
by LoganDark 9mo ago
Don't modern browsers automatically redirect http to https?
- qu4z-2 9mo agoThen use a non-buggy browser...
- Gigachad 9mo agoNo they don't. I tried Chrome, Firefox, and Safari. None of them attempted to redirect. They just show a "not secure" warning in the URL bar. The redirect only happens when it's configured on the web server, set in HSTS, or on a TLD that enforces HTTPS. None of these apply to this website.
- LoganDark 9mo agoApparently it's not on by default, but all of my browsers do and also warn me whenever a site does not support HTTPS (and require me to explicitly click through to the unencrypted connection).
- kmeisthax 9mo agoNot unless the site sends the CSP header to tell it to upgrade to https: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/upgrade-insecure-requests https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/... A client side option to force https might still be useful though. But I can imagine at least some enterprise webapp that would die horribly if you tried this.