Re:HTTP API Design Guide
by matt_kantor on Wednesday November 26, 2014 @08:40PM
(#8665601)
> and redirect web traffic from HTTP to HTTPS.
The original post [advises against this][1]:
> Redirects are discouraged since they allow sloppy/bad client behaviour without providing any clear gain. Clients that rely on redirects double up on server traffic and render TLS useless since sensitive data will already have been exposed during the first call.
The original post [advises against this][1]:
> Redirects are discouraged since they allow sloppy/bad client behaviour without providing any clear gain. Clients that rely on redirects double up on server traffic and render TLS useless since sensitive data will already have been exposed during the first call.
[1]: https://github.com/interagent/http-api-design#require-tls