News for hackers. Stuff that matters.

A comment on Why Static Websites Need HTTPS. Parent comment

Re:Why Static Websites Need HTTPS by thaniri on Tuesday August 28, 2018 @09:19AM (#17858558)
You can set up your apache/nginx or whatever webserver to redirect http requests to https. That way you can still link to your website with an http:// URL.
[ Parent | on HN ]
Re:Why Static Websites Need HTTPS by iamben on Tuesday August 28, 2018 @09:26AM (#17858599)
Appreciated, but this is a hacky solution. If you use the graph explorer, both the http and https addresses have different counts. It's very frustrating - shouldn't be that way.
[ Parent | on HN ]
Re:Why Static Websites Need HTTPS by prophesi on Tuesday August 28, 2018 @09:39AM (#17858678)
Add your site to the HSTS Preload List, then it'll be very unlikely to have any HTTP hits.
[ Parent | on HN ]
Re:Why Static Websites Need HTTPS by iamben on Tuesday August 28, 2018 @09:44AM (#17858726)
Didn't realise that existed. Very useful thanks!

But again, it's not exactly up there for John Everyman - and it doesn't sort Facebook having different share counts for the https and http domain.

[ Parent | on HN ]
Re:Why Static Websites Need HTTPS by prophesi on Tuesday August 28, 2018 @09:46AM (#17858737)
True. And you have to be extra careful with HSTS Preloading; if one of your subdomains breaks because of HTTPS, it'll be a pain to get your domain taken off the list.
[ Parent | on HN ]