Apache Lounge



Forum Index Downloads Search Register Log in  RSS Apache Lounge

Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.



A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Apache Lounge is not sponsored.

Your donations will help to keep this site alive and well, and continuing building binaries.

Closing HTTP on a HTTPs run site

Post new topic   Reply to topic    Apache Forum Index -> Apache

View previous topic :: View next topic  
Author Message

Joined: 31 Jul 2009
Posts: 72

PostPosted: Mon 03 Jul '17 21:10    Post subject: Closing HTTP on a HTTPs run site Reply with quote

I'm just curious , is it a good practice to eliminate port 80 http while my site runs https.?
Back to top

Joined: 27 Jun 2016
Posts: 56
Location: Schömberg, Baden-Württemberg, Germany

PostPosted: Tue 04 Jul '17 20:06    Post subject: Reply with quote

For user's experience I would propose to create a redirect from http to https if your site is running on https.
This way the user may enter "www.example.org" (without http:// or https://), the browser tries http:// automatically and gets redirected to the https://-URL.
For security reason you should point the webserver's document-root to an empty (or not existing) directory so that you don't expose sensitive data unencrypted if you have some misconfiguration in your http->https-redirect.
Back to top

Post new topic   Reply to topic    Apache Forum Index -> Apache
Page 1 of 1