News for hackers. Stuff that matters.

A comment on Y Combinator Resources for Developers. Parent comment

Re:Y Combinator Resources for Developers by CydeWeys on Wednesday February 20, 2019 @10:34AM (#19208605)
Can you confirm that it's not rewriting the URL to https://yc.dev first before issuing a request to the network? It's possible that Safari has suffered some kind of regression. This definitely used to work at some point.

I can confirm here in Chrome and Firefox that the URL is rewritten internally to https://yc.dev (which then redirects to https://ycombinator.dev), so no unencrypted traffic is ever sent over the network.

[ Parent | on HN ]
Re:Y Combinator Resources for Developers by gbear605 on Wednesday February 20, 2019 @11:01AM (#19208918)
Unfortunately I’m not in a situation where I can test that. It’s very possible that that’s the case, but it then leaves the question of why the non-https ycombinator.dev is what we eventually end up on.
[ Parent | on HN ]
Re:Y Combinator Resources for Developers by CydeWeys on Wednesday February 20, 2019 @01:49PM (#19210758)
Separate from HSTS, they should also be redirecting http to https. Hopefully they'll get around to that soon. The domain is still recent so they're probably not finished with configuration.
[ Parent | on HN ]