News for hackers. Stuff that matters.

A comment on Why Static Websites Need HTTPS. Parent comment

Re:Why Static Websites Need HTTPS by prophesi on Tuesday August 28, 2018 @09:39AM (#17858678)
Add your site to the HSTS Preload List, then it'll be very unlikely to have any HTTP hits.
[ Parent | on HN ]
Re:Why Static Websites Need HTTPS by iamben on Tuesday August 28, 2018 @09:44AM (#17858726)
Didn't realise that existed. Very useful thanks!

But again, it's not exactly up there for John Everyman - and it doesn't sort Facebook having different share counts for the https and http domain.

[ Parent | on HN ]
Re:Why Static Websites Need HTTPS by prophesi on Tuesday August 28, 2018 @09:46AM (#17858737)
True. And you have to be extra careful with HSTS Preloading; if one of your subdomains breaks because of HTTPS, it'll be a pain to get your domain taken off the list.
[ Parent | on HN ]