Hacker News new | ask | show | jobs
by kouru225 569 days ago
Don’t most browsers just auto direct to https though?
2 comments

Only if there is HSTS (=if the site was visited previously and told the browser to always switch to https for the generally-6 months duration).
Yes, but the redirection takes both time and energy, that’s what makes it such a good form of sabotage, the grit in the engine that’s too small to notice but still leads to pain and cost.