canpolat@programming.dev to Programming@programming.devEnglish · 1 month agoYour API Shouldn't Redirect HTTP to HTTPSjviide.iki.fiexternal-linkmessage-square9fedilinkarrow-up188arrow-down14
arrow-up184arrow-down1external-linkYour API Shouldn't Redirect HTTP to HTTPSjviide.iki.ficanpolat@programming.dev to Programming@programming.devEnglish · 1 month agomessage-square9fedilink
minus-squarevithigar@lemmy.calinkfedilinkarrow-up38arrow-down1·edit-21 month agoThis article isn’t about browsers or websites, and even acknowledges in the opening that it makes sense as a usability tradeoff in that context.
minus-squarev9CYKjLeia10dZpz88iU@programming.devlinkfedilinkarrow-up11arrow-down4·1 month agoI clearly didn’t read it. It makes sense, if users aren’t visiting the API then it really doesn’t matter that it’s not redirected on insecure connections.
This article isn’t about browsers or websites, and even acknowledges in the opening that it makes sense as a usability tradeoff in that context.
I clearly didn’t read it. It makes sense, if users aren’t visiting the API then it really doesn’t matter that it’s not redirected on insecure connections.