logo
Apache Lounge
Webmasters

 


About

Forum Index Downloads Search Register Log in  RSS Apache Lounge
 



Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.

or

Bitcoin

A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Apache Lounge is not sponsored.

Your donations will help to keep this site alive and well, and continuing building binaries.



Closing HTTP on a HTTPs run site

 
Post new topic   Reply to topic    Apache Forum Index -> Apache



View previous topic :: View next topic  
Author Message
puertoblack2003



Joined: 31 Jul 2009
Posts: 64

PostPosted: Mon 03 Jul '17 21:10    Post subject: Closing HTTP on a HTTPs run site Reply with quote

I'm just curious , is it a good practice to eliminate port 80 http while my site runs https.?
Back to top
mraddi



Joined: 27 Jun 2016
Posts: 28
Location: Schömberg, Baden-Württemberg, Germany

PostPosted: Tue 04 Jul '17 20:06    Post subject: Reply with quote

For user's experience I would propose to create a redirect from http to https if your site is running on https.
This way the user may enter "www.example.org" (without http:// or https://), the browser tries http:// automatically and gets redirected to the https://-URL.
For security reason you should point the webserver's document-root to an empty (or not existing) directory so that you don't expose sensitive data unencrypted if you have some misconfiguration in your http->https-redirect.
Back to top


Post new topic   Reply to topic    Apache Forum Index -> Apache
Page 1 of 1