On Sun, 20 Jul 2014, Stefano Zacchiroli wrote:

> AFAICT the only technical change that will do that (sanely) is an
> HTTP-level redirection from http://(.*) to https://$1 .

That is my understanding as well.


> - it's not entirely clear how much extra work implementing this would
>   require. In particular, I haven't put much thought in an easy way to
>   implement the directory-level opt-out.
> 
> - I *personally* don't mind having https only, quite the contrary! But I
>   got hooked by the discussions and couldn't resist proposing an API :)
>   (sorry)

IMO, a dedicated vhost name sounds much more appealing than magic apache
configs.  I wonder whether it should use the same UserDirs.

-- 
                           |  .''`.       ** Debian **
      Peter Palfrader      | : :' :      The  universal
 http://www.palfrader.org/ | `. `'      Operating System
                           |   `-    http://www.debian.org/


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140720190005.gp...@anguilla.noreply.org

Reply via email to