News for hackers. Stuff that matters.

A comment on API Shouldn't Redirect HTTP to HTTPS. Parent comment

Re:API Shouldn't Redirect HTTP to HTTPS by sfn42 on Wednesday May 29, 2024 @11:06AM (#40512723)
Won't those people have the same experience? The app won't work until they configure it securely
[ Parent | on HN ]
Re:API Shouldn't Redirect HTTP to HTTPS by ljm on Wednesday May 29, 2024 @12:26PM (#40513735)
There is a non-zero number of developers out there who would sooner deploy a proxy that upgrades http to https because the thought of changing the application code wouldn’t spring to mind
[ Parent | on HN ]
Re:API Shouldn't Redirect HTTP to HTTPS by fl0ki on Wednesday May 29, 2024 @11:16AM (#40512828)
It appears the trick they've found is to disable TLS on both ends :)
[ Parent | on HN ]