Recent searches
Search options
@mattly
Software trying to be smart, but thus failing in the simplest scenarios.
My (mobile) browser redirects http to https, despite I explicitly type a `http` url.
@hiker If you explicitly type http:// and you complain about it being replaced by https://, that's likely cause https isn't available so there is little chance any web server without HTTPS redirects clients to HTTPS
But that's easy to verify. curl -iL http://example.com
If it has a Location header with an HTTPS URL, then redirection comes from the webserver. If not, it's either the browser HTTPS only mode OR some stupid JavaScript rewriting the URL without using headers.
@hiker You're obviously not since you claim "That must not be the fault of the browser"… Which is plain wrong…
Modern browser tend to enforce HTTPS even
- without redirection
- without HSTS header
Which means people who are used to use "normal" GUI browsers won't be able to test HSTS or redirections (without or without Location header) to make sure everyone gets the HTTPS version no matter what their browsers or settings are, unless webdves/admins disable HTTPS only mode on their own browsers…