On Mon, Jul 21, 2014 at 5:22 PM, Wouter Verhelst wrote:

> Yes it does.

No...

> I just tried chromium and iceweasel on this laptop (running sid, a few
> days out of date). Both will turn "http://www.debian.org"; into
> "https://www.debian.org"; due to HSTS. This works whether I enter the
> "http://"; prefix or not.

http://www.debian.org/ does not deliver the HSTS header so it
definitely isn't HSTS causing this upgrade to https.

pabs@chianamo ~ $ wget http://www.debian.org/ -SO /dev/null 2>&1 | grep Sec
pabs@chianamo ~ $ wget https://www.debian.org/ -SO /dev/null 2>&1 | grep Sec
  Strict-Transport-Security: max-age=5184000

-- 
bye,
pabs

https://wiki.debian.org/PaulWise


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/caktje6gsnan41yhr_ge8_mr7oo_8gtf3zlzv-tnuxycucqc...@mail.gmail.com

Reply via email to