Re: people.debian.org will move from ravel to paradis and become HTTPS only
On Mon, Jul 21, 2014 at 5:22 PM, Wouter Verhelst wrote:
> Yes it does.
No...
> I just tried chromium and iceweasel on this laptop (running sid, a few
> days out of date). Both will turn "http://www.debian.org" into
> "https://www.debian.org" due to HSTS. This works whether I enter the
> "http://" prefix or not.
http://www.debian.org/ does not deliver the HSTS header so it
definitely isn't HSTS causing this upgrade to https.
pabs@chianamo ~ $ wget http://www.debian.org/ -SO /dev/null 2>&1 | grep Sec
pabs@chianamo ~ $ wget https://www.debian.org/ -SO /dev/null 2>&1 | grep Sec
Strict-Transport-Security: max-age=5184000
--
bye,
pabs
https://wiki.debian.org/PaulWise
Reply to: