ietf
[Top] [All Lists]

Re: The ability to automatically upgrade a reference to HTTPS from HTTP

2014-08-23 10:05:16
On Aug 23, 2014, at 12:03 AM, Eliot Lear <lear(_at_)cisco(_dot_)com> wrote:


On 8/22/14, 11:37 PM, Nico Williams wrote:
On Fri, Aug 22, 2014 at 12:16:22PM -0700, Tim Bray wrote:

What this means is that a client given an http:  URL in a reference is
always free to try out the HTTPS, just adding an S, and use result if the
is successful.
It too late for that though: all too often the two resources are not the
same.


Indeed.  Regrettably I suspect the worst offender would be the index
itself for the site (e.g., http://www.example.com v.
https://www.example.com).

Um? Those look identical to me.

--Paul Hoffman

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail