Re:Show HN: Cancel your Comcast in 5 minutes
by ptaipale on Sunday October 04, 2015 @01:22AM
(#10326582)
I suppose previous poster meant that WP should default to offer its service over HTTPS, i.e. when you first connect over HTTP, the site immediately redirects you to a HTTPS connection. Like e.g. this site (HN) does (connecting to http://news.ycombinator.com/ gives you 301 Moved Permanently, location https://news.ycombinator.com/ ).
Re:Show HN: Cancel your Comcast in 5 minutes
by Symbiote on Sunday October 04, 2015 @04:17AM
(#10326882)
The better solution is HSTS, which would tell the browser to use HTTPS for the site for the next year.
The main browsers come with a list of known HSTS sites, so you'll never use HTTP to access google.com (etc).
https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security
This can't be done because if you just type "washingtonpost.com" into your browser or some algorithm creates links out of plain text (like in an email)... the default is always http:// The internet expects http://yourdomain.tld to always work.