News for hackers. Stuff that matters.

A comment on Show HN: Cancel your Comcast in 5 minutes. Parent comment

Re:Show HN: Cancel your Comcast in 5 minutes by ptaipale on Sunday October 04, 2015 @01:22AM (#10326582)
I suppose previous poster meant that WP should default to offer its service over HTTPS, i.e. when you first connect over HTTP, the site immediately redirects you to a HTTPS connection. Like e.g. this site (HN) does (connecting to http://news.ycombinator.com/ gives you 301 Moved Permanently, location https://news.ycombinator.com/ ).
[ Parent | on HN ]
Re:Show HN: Cancel your Comcast in 5 minutes by Symbiote on Sunday October 04, 2015 @04:17AM (#10326882)
The better solution is HSTS, which would tell the browser to use HTTPS for the site for the next year.

The main browsers come with a list of known HSTS sites, so you'll never use HTTP to access google.com (etc).

https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security

[ Parent | on HN ]