On Mon, Jul 21, 2014 at 5:22 PM, Wouter Verhelst wrote: > Yes it does.
No... > I just tried chromium and iceweasel on this laptop (running sid, a few > days out of date). Both will turn "http://www.debian.org" into > "https://www.debian.org" due to HSTS. This works whether I enter the > "http://" prefix or not. http://www.debian.org/ does not deliver the HSTS header so it definitely isn't HSTS causing this upgrade to https. pabs@chianamo ~ $ wget http://www.debian.org/ -SO /dev/null 2>&1 | grep Sec pabs@chianamo ~ $ wget https://www.debian.org/ -SO /dev/null 2>&1 | grep Sec Strict-Transport-Security: max-age=5184000 -- bye, pabs https://wiki.debian.org/PaulWise -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/caktje6gsnan41yhr_ge8_mr7oo_8gtf3zlzv-tnuxycucqc...@mail.gmail.com