logo
Apache Lounge
Webmasters

 

About Forum Index Downloads Search Register Log in RSS X


Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.

or

Bitcoin

A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
Post new topic   Forum Index -> Apache View previous topic :: View next topic
Reply to topic   Topic: Closing HTTP on a HTTPs run site
Author
puertoblack2003



Joined: 31 Jul 2009
Posts: 118
Location: U.S

PostPosted: Mon 03 Jul '17 21:10    Post subject: Closing HTTP on a HTTPs run site Reply with quote

I'm just curious , is it a good practice to eliminate port 80 http while my site runs https.?
Back to top
mraddi



Joined: 27 Jun 2016
Posts: 149
Location: Schömberg, Baden-Württemberg, Germany

PostPosted: Tue 04 Jul '17 20:06    Post subject: Reply with quote

For user's experience I would propose to create a redirect from http to https if your site is running on https.
This way the user may enter "www.example.org" (without http:// or https://), the browser tries http:// automatically and gets redirected to the https://-URL.
For security reason you should point the webserver's document-root to an empty (or not existing) directory so that you don't expose sensitive data unencrypted if you have some misconfiguration in your http->https-redirect.
Back to top


Reply to topic   Topic: Closing HTTP on a HTTPs run site View previous topic :: View next topic
Post new topic   Forum Index -> Apache