GNU bug report logs - #37348
Force https redirect missing from ci, workflow and workflows guix.info sub-domains

Previous Next

Package: guix;

Reported by: "Collin J. Doering" <collin <at> rekahsoft.ca>

Date: Mon, 9 Sep 2019 02:50:02 UTC

Severity: normal

Done: Tobias Geerinckx-Rice <me <at> tobias.gr>

Bug is archived. No further changes may be made.

Full log

View this message in rfc822 format

From: Tobias Geerinckx-Rice <me <at> tobias.gr>
Cc: 37348 <at> debbugs.gnu.org
Subject: bug#37348: [PATCH] hydra: berlin: Redirect HTTP to HTTPS by default.
Date: Wed, 03 Nov 2021 02:18:11 +0100

[Message part 1 (text/plain, inline)]
> Now, for some reason, current Firefox doesn't seem to do any of 
> this
> (compatibility?) but it may only be a matter of time.

Probably due to gnu.org wonkiness:

 ~ λ curl -LI https://www.gnu.org
 […]
 Strict-Transport-Security: max-age=63072000

I.e., missing includeSubDomains, and (at least my) browser's 
apparent urge to connect to www.gnu.org even when I type 
https://gnu.org.

We can't keep relying on this, though.

Kind regards,

T G-R

[signature.asc (application/pgp-signature, inline)]
This bug report was last modified 3 years and 185 days ago.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.