News for hackers. Stuff that matters.
Re:Why No HTTPS? by Scott_Helme_ on Tuesday July 24, 2018 @07:04AM (#17599856)
Our accuracy rate is currently around 99.6% so we're doing pretty well but of course I don't think it can ever be 100% either.

The biggest thing we've come across so far is geo-sensitive handling of requests. Some sites will redirect you to HTTPS or not based on where you are making the request from! This of course means you might see HTTPS and we see HTTP.

I think it's still fair to include those sites in this case because they aren't serving all traffic securely.

Re:Why No HTTPS? by jlengrand on Tuesday July 24, 2018 @07:19AM (#17599943)
Hey, thanks for the extra insight, I do appreciate. Interesting to know that those sites show these behaviours too. Why could geo-location based redirect be interesting?
Re:Why No HTTPS? by Scott_Helme_ on Tuesday July 24, 2018 @03:33PM (#17604207)
My guess would be that maybe sites have different infrastructure in different regions and maybe they aren't completely aligned on their progress. I really don't know why you'd intentionally have it like that.
Re:Why No HTTPS? by jlengrand on Tuesday July 24, 2018 @04:19PM (#17604575)
I thought about country restrictions as well. I noticed most of the offending websites were in China. Wondering is having SSL there is not allowed or something.