[bug-diffutils] bug#56468: [gnu.org #1853606] Re: bug#56468: www.gnu.org doesn't change http: to https:

[Andrew Engelbrecht via RT]

On Sat Jul 09 15:04:09 2022, eggert@CS.UCLA.EDU wrote:
> On 7/9/22 12:03, Jerry Peek wrote:
> > I just clicked on an old link to 
> > http://www.gnu.org/software/diffutils/manual/. Then the web browser 
> > showed the address http://www.gnu.org/software/diffutils/manual/ and 
> > marked it "insecure". So I tried 
> > https://www.gnu.org/software/diffutils/manual/ (with an s) and the 
> > browser showed that address.
> >
> > I'm writing to suggest that you might add a redirect from 
> > http://www.gnu.org/software/diffutils/manual/ to 
> > https://www.gnu.org/software/diffutils/manual/ so that no one will get 
> > the "insecure" page. 

Hi,

Sorry about the delayed reply. We want to support both HTTPS and HTTP, for 
those who are using old browsers with outdated ciphers, etc. The HSTS rule is 
there for people who do visit the HTTPS site, so they will automatically use it 
in the future.

I would personally lean towards more HTTPS, but so far, gnu.org is an exception 
to that. More discussion is welcome.

Thanks,
Andrew