3 ms·
And surprises me how few SSL-deploying sysadmins use HTTPS Everywhere! (Or perhaps, how few browse their own site...)
by jackweirdy 11y ago
And surprises me how few SSL-deploying sysadmins use HTTPS Everywhere! (Or perhaps, how few browse their own site...)
- hluska 11y agoI'm getting the sense that QA means something dramatically different to the web developers of today...Seldom a day goes by when I don't find major errors (that I would fire people for not catching) on major web apps!!
- tekromancr 11y agoYea, but sometimes it's impossible to offer TLS. Like, in this case, where a forum software is being hosted remotely, and they are putting a custom domain in front of it. Squarespace is another notable example. These services simply DON'T offer ssl support when used with custom domains. You really can't expect everything to work right when you aren't even offering the service that is being requested, can you?
- yellowapple 11y agoThat's because quite a few of us shunt the folks trying to access port 80 back onto port 443 (usually by redirecting the request to the https:// https:// equivalent, be it in the load balancer, in the web server, or (in some cases) in the application/site itself). The world's switching to HTTPS-only setups anyway (particularly when deploying JSON APIs, which are all the rage nowadays). Might as well be ahead of the curve.