Disable HTTPS upgrade? [LWN.net]

Disable HTTPS upgrade?

Posted Mar 5, 2025 15:06 UTC (Wed) by PeeWee (subscriber, #175777)
In reply to: Disable HTTPS upgrade? by ballombe
Parent article: Firefox 136.0 released

[...] one for 80 and one for 443. So unless you are careful, you will end up with different websites, and thanks to firefox, you will never notice since you will never actually reach the 80 one.

That's not thanks to FF but to the negligence of users who fail to enter complete URIs. It's also quite a stretch to assert that one has to be careful not to end up with different websites, since the default DocumentRoot is the same for both; plus, there is the include directive which makes such setups rather trivial. The opposite seems more likely: one has to be careful not to accidentally end up with the same website on both ports. But people will make up the silliest examples to find an excuse to bash FF, it seems.

At which point are probably better off removing the one port 80.

Unless there is a very good reason to provide unencrypted access one might as well not bother with setting up that one to begin with.

to post comments

Disable HTTPS upgrade?

Posted Mar 5, 2025 15:21 UTC (Wed) by rschroev (subscriber, #4164) [Link] (2 responses)

> "At which point are probably better off removing the one port 80."

>> Unless there is a very good reason to provide unencrypted access one might as well not bother with setting up that one to begin with.

On port 80 I always set up a redirect to port 443. Is that not the normal / expected thing to do?

Disable HTTPS upgrade?

Posted Mar 5, 2025 15:32 UTC (Wed) by PeeWee (subscriber, #175777) [Link] (1 responses)

OK, there's that, I totally forgot about it. But then you don't really have to bother with setting up anything beyond that on port 80. ;)

Disable HTTPS upgrade?

Posted Mar 6, 2025 13:19 UTC (Thu) by taladar (subscriber, #68407) [Link]

And, more importantly, this change in the default to https first will eventually lead to a world where we finally won't need that http Port just to redirect any more.