Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Redirect all HTTP requests to HTTPS on exist-db.org #36

Open
joewiz opened this issue Feb 15, 2022 · 1 comment
Open

Redirect all HTTP requests to HTTPS on exist-db.org #36

joewiz opened this issue Feb 15, 2022 · 1 comment
Assignees

Comments

@joewiz
Copy link
Member

joewiz commented Feb 15, 2022

@lguariento said:

PS: when are we getting a Let's Encrypt certificate 🙂 ? It's free and it'd look nicer, I think.

I responded:

The exist-db.org server has an HTTPS cert, actually. It’s just that the server doesn’t redirect HTTP requests to the HTTPS variety, or pass an HSTS header, etc.

p.s. I know this is an exist-db.org server configuration issue, not an issue with this app - but the repo is called "website" and there's no dedicated repo for exist-db.org server issues.

@joewiz
Copy link
Member Author

joewiz commented Feb 15, 2022

Among the various benefits would be that Google would take users to the HTTPS page by default, whereas now, even though HTTPS is supported, Google tends to take users to the HTTP page:

Screen Shot 2022-02-15 at 11 04 57 AM

Search results on HTTPS-only sites are often promoted over HTTP results.

HSTS headers would make the preference even more explicit.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants