[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: people.debian.org will move from ravel to paradis and become HTTPS only



On Mon, Jul 21, 2014 at 5:22 PM, Wouter Verhelst wrote:

> Yes it does.

No...

> I just tried chromium and iceweasel on this laptop (running sid, a few
> days out of date). Both will turn "http://www.debian.org"; into
> "https://www.debian.org"; due to HSTS. This works whether I enter the
> "http://"; prefix or not.

http://www.debian.org/ does not deliver the HSTS header so it
definitely isn't HSTS causing this upgrade to https.

pabs@chianamo ~ $ wget http://www.debian.org/ -SO /dev/null 2>&1 | grep Sec
pabs@chianamo ~ $ wget https://www.debian.org/ -SO /dev/null 2>&1 | grep Sec
  Strict-Transport-Security: max-age=5184000

-- 
bye,
pabs

https://wiki.debian.org/PaulWise


Reply to: