Hacker News new | ask | show | jobs
by 1vuio0pswjnm7 2099 days ago
What is the point of using an http:// URL with a website like NPR. These popular sites all redirect to https://

Headers will be sent over the wire in the clear before any redirection can occur.

A localhost-bound proxy can fix this before the request leaves network interface.

I guess the "modern" browser fixes this for everyone else not using a ("modern") proxy.

1 comments

> I guess the "modern" browser fixes this for everyone else not using a ("modern") proxy.

Only if the site owner wants it so https://hstspreload.org/