News for hackers. Stuff that matters.
Re:API Shouldn't Redirect HTTP to HTTPS by Aachen on Tuesday May 28, 2024 @04:59PM (#40505549)
I can appreciate this and also run a service that is neither meant to be commonly visited (imagine a tor exit node landing page explaining what this IP address is doing, but for a different service) nor will produce or ingest sensitive information

For a personal website that people might commonly want to visit, though, consider the second point made in this other comment: https://news.ycombinator.com/item?id=40505294 (someone else mentioned this in the thread slightly sooner than me but I don't see it anymore)

There are no comments on this comment yet.