News for hackers. Stuff that matters.
Re:API Shouldn't Redirect HTTP to HTTPS by bruce511 on Wednesday May 29, 2024 @09:49AM (#40511988)
I'm not sure if you're being sarcastic here or not? I mean you listed "reboot" as a whole step... which suggests sarcasm (at least to me)...

Anyway, all the steps together take what - all of 5 minutes? - that's if you do DNS Challenges. If you do HTTP challenges it doesn't even take that.

So you're saying this 5 minutes isn't worth the effort? That it's somehow too hard?

Re:API Shouldn't Redirect HTTP to HTTPS by noirscape on Wednesday May 29, 2024 @10:39AM (#40512469)
It's worth the effort, I just wouldn't use the descriptor of it being "fun". It's busywork equivalent to pointing nginx at your PHP socket. It's not fun, you're just wrangling a config file until it does what you want and the modern browsing landscape disproportionately demands HTTPS everywhere even for sites that arguably aren't really helped by it.