More information about the Underscore mailing list

[_] https://www

Andrew Holway andrew.holway at gmail.com
Mon Apr 15 23:12:50 BST 2019

>
> 2) prepend http:// - doesn't seem right but I guess that's what browsers
> are effectively doing
>

+1 - I don't think we can yet assume that all sites are https. Sites that
are https will have 3xx redirect set up on http.

Browsers nowadays to all kinds of weird tricks in the background. "http
strict transport security" is an interesting example.  If you go to
http://www.google.com Chrome will perform a 307 "Internal Redirect" as it
knows www.google.com should always be https.
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security