Redirect HTTP to HTTPS?

UPDATED 4/18/2024...

He's BACK Ladies and Germs! "LightWingStudios" is BACK! :)

Patrick
Post Reply
User avatar
Friedl
Reactions:
Posts: 32
Joined: Sat Sep 04, 2021 1:12 am

Not intended as criticism, but I noticed that the site supports basic authentication over http, but also supports https. I saw the sticky notice on the front page to use https, but wanted to let you know, in case you didn't, that you can host different content on the TCP 80 and TCP 443 web services, and the http (port 80) one could send a HTTP 302 (or a 301, for that matter) redirect to the https. This would basically prevent users from accidentally logging into the http site with unencrypted creds.
2nd-year bassist for about 30 years
User avatar
glasshand
Reactions:
Posts: 767
Joined: Fri Jun 12, 2020 10:53 am

I agree. HTTPS should be the default for everything in this day and age, and visiting a site over HTTP should redirect you to the HTTPS version.
golem
Reactions:
Posts: 985
Joined: Wed May 27, 2020 1:44 pm

As a developer, I endorse this suggestion.
User avatar
UrenragK
Reactions:
Posts: 782
Joined: Fri May 29, 2020 9:31 am
Location: Yoo Kay
Contact:

Agreed, I thought it was already like that - we will get it sorted :)
User avatar
LightWingStudios
Site Admin
Reactions:
Posts: 1018
Joined: Wed May 27, 2020 11:34 am
Location: Titusville, FL U.S. of A.
Contact:

Friedl wrote: Sun Sep 05, 2021 1:56 am Not intended as criticism, but I noticed that the site supports basic authentication over http, but also supports https. I saw the sticky notice on the front page to use https, but wanted to let you know, in case you didn't, that you can host different content on the TCP 80 and TCP 443 web services, and the http (port 80) one could send a HTTP 302 (or a 301, for that matter) redirect to the https. This would basically prevent users from accidentally logging into the http site with unencrypted creds.
Site updated...HTTP is now forced to the HTTPS automatically.
U.S. Manufacturer Of Musical Instrument Protection Accessories: AxeShield HD, AxeSak HD, AmpShield HD, KeyShield HD, PedalShield HD, MixShield HD, AxeGlove And AxeCap.

Visit Us At https://www.LightWingStudios.com

Email us at contact@LightWingStudios.com
User avatar
Friedl
Reactions:
Posts: 32
Joined: Sat Sep 04, 2021 1:12 am

NIce! Thanks
2nd-year bassist for about 30 years
User avatar
glasshand
Reactions:
Posts: 767
Joined: Fri Jun 12, 2020 10:53 am

Now, if you want to be really serious about it, you implement HSTS for the whole domain and get it put on the HSTS preload list... :mrgreen:
User avatar
LightWingStudios
Site Admin
Reactions:
Posts: 1018
Joined: Wed May 27, 2020 11:34 am
Location: Titusville, FL U.S. of A.
Contact:

glasshand wrote: Thu Sep 09, 2021 10:07 pm Now, if you want to be really serious about it, you implement HSTS for the whole domain and get it put on the HSTS preload list... :mrgreen:
Let's not get crazy given our resources and the nature of the site. :)
U.S. Manufacturer Of Musical Instrument Protection Accessories: AxeShield HD, AxeSak HD, AmpShield HD, KeyShield HD, PedalShield HD, MixShield HD, AxeGlove And AxeCap.

Visit Us At https://www.LightWingStudios.com

Email us at contact@LightWingStudios.com
Post Reply