News for hackers. Stuff that matters.

A comment on Why No HTTPS?.

Re:Why No HTTPS? by robinduckett on Tuesday July 24, 2018 @04:52AM (#17599196)
BBC.com does have HTTPS, they support http for older clients I assume. They still had a WAP site as far as I recall.
[ Parent | on HN ]
Re:Why No HTTPS? by b2ccb2 on Tuesday July 24, 2018 @04:57AM (#17599214)
The https request gets redirected to http:

  curl -IL https://www.bbc.com
  HTTP/2 302
  content-type: text/html
  date: Tue, 24 Jul 2018 08:55:34 GMT
  location: http://www.bbc.com/
  content-length: 0

  HTTP/1.1 200 OK
  Server: Apache
  Content-Type: text/html
  Expires: Tue, 24 Jul 2018 08:56:35 GMT
  Content-Language: en
  …
[ Parent | on HN ]
Re:Why No HTTPS? by johneth on Tuesday July 24, 2018 @05:04AM (#17599248)
bbc.com redirects to bbc.co.uk in the UK, which is served over HTTPS. They just flipped that switch a couple of months ago, so I'd assume that it won't be long before bbc.com is also HTTPS.
[ Parent | on HN ]
Re:Why No HTTPS? by h2onock on Tuesday July 24, 2018 @05:04AM (#17599255)
Wow, that's unbelievable!
[ Parent | on HN ]
Re:Why No HTTPS? by jayflux on Tuesday July 24, 2018 @05:47AM (#17599445)
There is work undergoing to migrate bbc.com to HTTPS.

Most BBC sites in the UK have already been switched over the past few months. https://www.bbc.co.uk/news was finished about a month ago. The BBC is a complicated beast and these sort of things take longer than you would think.

We redirect to http in the meantime to not have both being indexed.

[ Parent | on HN ]
Re:Why No HTTPS? by toomanybeersies on Tuesday July 24, 2018 @05:38AM (#17599398)
bbc.com is http only for me. It redirects me to http if I try https.
[ Parent | on HN ]