Hacker News new | ask | show | jobs
by overcast 3237 days ago
The redirection of https to http on neilpatel.com is amazing. That's something I've never seen in my life.
3 comments

Really? Another popular example is https://store.steampowered.com/.
Lol they're HTTPS on the login form but plain HTTP immediately after... what a joke? That invites people to do cred fishing on bigger LAN parties or conferences...
Yeah...you could just replace the HTTP landing page with your own containing your own login form.
Holy crap, I've never noticed that.

They 2FA me on every login and then do that?!

I've always used the app :/ that's disappointing.
It took me a minute of browsing around the site and then coming back here to ask, before I realized that you're saying they're redirecting httpS to PLAIN http. Wow.
I've actually seen it a few times myself but I don't have any examples offhand. My company's filter is lazy so it doesn't filter https traffic. Sometimes if I get a blocked site that's http I try the URL with https instead. Once in a while I get a redirect to http.