News for hackers. Stuff that matters.

A comment on Bringing HSTS to www.google.com. Parent comment

Re:Bringing HSTS to www.google.com by niftich on Friday July 29, 2016 @04:56PM (#12189932)
You can use http://example.com operated by the IANA, which is accessible though http and https.

Since an auto-upgrade to https would break a considerable number of examples, and there's no compelling business need on their part to promote https-only, it's much more likely to stay available through http than just about any other website run by commercial interests.

[ Parent | on HN ]
Re:Bringing HSTS to www.google.com by Nullabillity on Friday July 29, 2016 @09:31PM (#12191220)
example.com just seems to point to localhost for me. Weird...
[ Parent | on HN ]
Re:Bringing HSTS to www.google.com by toast0 on Friday July 29, 2016 @09:47PM (#12191249)
Possibly you have a config somewhere that has example.com in it... Could try example.org instead?
[ Parent | on HN ]
Re:Bringing HSTS to www.google.com by Nullabillity on Saturday July 30, 2016 @05:49AM (#12192326)
Same thing there. Oddly enough, `dig @8.8.8.8 example.com` seems to work. No mention of it in /etc/hosts. Guess my ISP must be up to some shenanigans. :/
[ Parent | on HN ]
Re:Bringing HSTS to www.google.com by cocotino on Saturday July 30, 2016 @06:59AM (#12192481)
With mine I get:

    Host example.com not found: 5(REFUSED)
[ Parent | on HN ]