[HTTPS-Everywhere] When is appropriate to add rules

No http httpless at gmail.com
Sun Jul 4 08:11:50 PDT 2010


On 3 July 2010 20:31, Peter Eckersley <pde at eff.org> wrote:
> An example of a site where there is *no* point in adding a ruleset is one
> where the site answers every request over HTTPS, but responds with a 302
> redirect back to HTTP.

Thanks for that clarification, makes sense now.  Annoyingly there's a
large number of sites that opt for the 302 redirect option.  Time to
send a few emails I think.



More information about the HTTPS-everywhere mailing list