On 8/22/14, 11:37 PM, Nico Williams wrote:
On Fri, Aug 22, 2014 at 12:16:22PM -0700, Tim Bray wrote:
What this means is that a client given an http: URL in a reference is
always free to try out the HTTPS, just adding an S, and use result if the
is successful.
It too late for that though: all too often the two resources are not the
same.
Indeed. Regrettably I suspect the worst offender would be the index
itself for the site (e.g., http://www.example.com v.
https://www.example.com).
Eliot
signature.asc
Description: OpenPGP digital signature