[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: people.debian.org will move from ravel to paradis and become HTTPS only

On Sun, Jul 20, 2014 at 01:52:20PM +0200, Peter Palfrader wrote:
> On Sun, 20 Jul 2014, Wouter Verhelst wrote:
> > These are all good arguments for enabling HTTPS and making it the
> > default (which I've said repeatedly is a move that I support, or at the
> > very least don't oppose), but not for *disabling* the possibility of
> > plain HTTP.
> Pray tell: How do you make it default.

See: http://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security

It sends a header to tell you you should be using HTTPS.

I am happy however to just use a seperate VHOST for non-HTTPS access.


e: irl@fsfe.org            w: iain.learmonth.me
x: irl@jabber.fsfe.org     t: +447875886930
c: MM6MVQ                  g: IO87we
p: 1F72 607C 5FF2 CCD5 3F01 600D 56FF 9EA4 E984 6C49

Attachment: pgpJZ9W3Tt5l0.pgp
Description: PGP signature

Reply to: