Hacker News new | ask | show | jobs
by icebraining 3181 days ago
Yes, no redirect can protect the user from that. In fact, not even completely disabling HTTP can - the ISP can respond on port 80 anyway. But it can protect them if they open it on a safe connection and then bookmark the page, or keep the tab open, or send the link to someone else, and then use that link on an unsafe connection.
1 comments

Or using HSTS (especially with HSTS preloading)