Redirect HTTP to HTTPS?
- Friedl
- Reactions:
- Posts: 32
- Joined: Sat Sep 04, 2021 1:12 am
Not intended as criticism, but I noticed that the site supports basic authentication over http, but also supports https. I saw the sticky notice on the front page to use https, but wanted to let you know, in case you didn't, that you can host different content on the TCP 80 and TCP 443 web services, and the http (port 80) one could send a HTTP 302 (or a 301, for that matter) redirect to the https. This would basically prevent users from accidentally logging into the http site with unencrypted creds.
2nd-year bassist for about 30 years
- glasshand
- Reactions:
- Posts: 796
- Joined: Fri Jun 12, 2020 10:53 am
- Location: NYC, the center of the universe
- Contact:
I agree. HTTPS should be the default for everything in this day and age, and visiting a site over HTTP should redirect you to the HTTPS version.
- LightWingStudios
- Site Admin
- Reactions:
- Posts: 1040
- Joined: Wed May 27, 2020 11:34 am
- Location: Titusville, FL U.S. of A.
- Contact:
Site updated...HTTP is now forced to the HTTPS automatically.Friedl wrote: ↑Sun Sep 05, 2021 1:56 am Not intended as criticism, but I noticed that the site supports basic authentication over http, but also supports https. I saw the sticky notice on the front page to use https, but wanted to let you know, in case you didn't, that you can host different content on the TCP 80 and TCP 443 web services, and the http (port 80) one could send a HTTP 302 (or a 301, for that matter) redirect to the https. This would basically prevent users from accidentally logging into the http site with unencrypted creds.
U.S. Manufacturer Of Musical Instrument Protection Accessories: AxeShield HD, AxeSak HD, AmpShield HD, KeyShield HD, PedalShield HD, MixShield HD, AxeGlove And AxeCap.
Visit Us At https://www.LightWingStudios.com
Email us at contact@LightWingStudios.com
Visit Us At https://www.LightWingStudios.com
Email us at contact@LightWingStudios.com
- glasshand
- Reactions:
- Posts: 796
- Joined: Fri Jun 12, 2020 10:53 am
- Location: NYC, the center of the universe
- Contact:
Now, if you want to be really serious about it, you implement HSTS for the whole domain and get it put on the HSTS preload list... 

- LightWingStudios
- Site Admin
- Reactions:
- Posts: 1040
- Joined: Wed May 27, 2020 11:34 am
- Location: Titusville, FL U.S. of A.
- Contact:
Let's not get crazy given our resources and the nature of the site.

U.S. Manufacturer Of Musical Instrument Protection Accessories: AxeShield HD, AxeSak HD, AmpShield HD, KeyShield HD, PedalShield HD, MixShield HD, AxeGlove And AxeCap.
Visit Us At https://www.LightWingStudios.com
Email us at contact@LightWingStudios.com
Visit Us At https://www.LightWingStudios.com
Email us at contact@LightWingStudios.com