View Single Post
Old 16. Mar 2019, 04:16 AM   #14 (permalink)
Sea Mac
Senior Member
 
Sea Mac's Avatar
 
Join Date: Apr 2008
Location: Body: San Diego | Mind: Lost | Heart: With You
Posts: 582
Thumbs up Uh, Huh. Buttoned up TIGHT Now.

Some change you made in the last couple of days PREVENTS ME from landing on any "HTTP" Page anywhere on this Domain. A week ago I COULD go to http://www.techsupportalert.com !!! Now, I can NOT.

So, say I followed an old bookmark for http://techsupportalert.com ? Uh-Uh, No, that won't load INSECURELY ANY MORE. I tried entering it MANUALLY with an HTTP - Like last week - unlike last week that is NOT Accessible anymore, sorry. (I mean, Hooray!)

And, NO Browser is going to Complain about "This Connection is Insecure" on this site ever again. Problem Solved.

So, did HSTS work out for you, or did you use ANOTHER Method of causing a HTTPS redirect? (If that simple Header Write actually FIXED the Issue ... go See what Grade you get over at SSL Mate: https://www.ssllabs.com/ssltest/ - I get a "B" ... which is NOT Bad ... and I might be upgraded to an "A" later this year.)

EDIT: You get an "A" because you PAID for your Certificates. Quite Nice.

OK, Let's White Hat hack our own site to SEE if any of us CAN find an Unsecured Page ... like a Treasure Hunt. (If You used the 'HSTS On' headers on this Domain: please tell me ... because I Won't bother to PRY any further ... I'll not be finding ANY THING Exposed ever again!)
__________________
"Software Santa" owes a debt of thanks to Tech Support Alert. Thank You.

Last edited by Sea Mac; 16. Mar 2019 at 04:31 AM.
Sea Mac is online now   Reply With Quote