When I’m having trouble logging into a Wi-Fi network I just go to 128.1.1.1. Seems to work every time.
NeverSSL
61–70 of 206 posts
Re: NeverSSL
#62Earlier quoted context omitted.
In both Chrome and Firefox, when I type "example.com" into the URL bar, I go to https://example.com , probably because I've visited the https site before and they remember that. So I do not recommend example.com .
I don't think the IANA domains make use of HSTS or anything of the like. HTTP/2.0 304 Not Modified cache-control: max-age=604800 date: Sat, 02 Nov 2019 22:22:19 GMT etag: "3147526947+gzip" expires: Sat, 09 Nov 2019 22:22:19 GMT last-modified: Thu, 17 Oct 2019 07:18:26 GMT server: ECS (sjc/4E71) vary: Accept-Encoding If you type "example.com" into the URL, both Firefox and Chrome will try HTTPS first. If you want plai…
I don't think HTTPS is the default automatically. When I create a new Chrome profile, then type example.com into the url bar and hit enter, I go to http://example.com . Then when I type https://example.com twice (each time hitting enter) then type example.com and hit enter, I go to https://example.com . So I think it might be whichever is more common in your history.
Firefox behaves very similarly, except I don't have to visit https://example.com twice before it becomes the default, I just have to visit it once.
Re: NeverSSL
#63I just use http://captive.apple.com
Re: NeverSSL
#64http://example.com also does this, albeit without the promise of never switching
And with a different relationship: * neverssl might be bought out, or re-registered, at some time in the future. * example.com is a IANA reserved domain [0], which whilst it doesn't guarantee they'll never deploy SSL, does mean nobody else can register it, ever (RFC 6761) [1]. [0] https://www.iana.org/domains/reserved [1] https://tools.ietf.org/html/rfc6761
Has an interesting WHOIS record too. The "registrar" is "RESERVED-Internet Assigned Numbers Authority", and no admin/technical/billing contacts like in standard whois entries.
Re: NeverSSL
#65Earlier quoted context omitted.
I don't think the IANA domains make use of HSTS or anything of the like. HTTP/2.0 304 Not Modified cache-control: max-age=604800 date: Sat, 02 Nov 2019 22:22:19 GMT etag: "3147526947+gzip" expires: Sat, 09 Nov 2019 22:22:19 GMT last-modified: Thu, 17 Oct 2019 07:18:26 GMT server: ECS (sjc/4E71) vary: Accept-Encoding If you type "example.com" into the URL, both Firefox and Chrome will try HTTPS first. If you want plai…
I don't think HTTPS is the default automatically. When I create a new Chrome profile, then type example.com into the url bar and hit enter, I go to http://example.com . Then when I type https://example.com twice (each time hitting enter) then type example.com and hit enter, I go to https://example.com . So I think it might be whichever is more common in your history. Firefox behaves very similarly, except I don't hav…
This could also happen because of an extension like HTTPS Everywhere, which requests the https by default when both are available.
Re: NeverSSL
#66http://neverssl.com/changes
> I also want to keep neverssl.com ad free, but as it's now costing me about $2,000 a year to host it, […]
Wait, how could hosting a static website cost $2k/year?!
Re: NeverSSL
#67http://example.com also does this, albeit without the promise of never switching
And with a different relationship: * neverssl might be bought out, or re-registered, at some time in the future. * example.com is a IANA reserved domain [0], which whilst it doesn't guarantee they'll never deploy SSL, does mean nobody else can register it, ever (RFC 6761) [1]. [0] https://www.iana.org/domains/reserved [1] https://tools.ietf.org/html/rfc6761
http://example.com/ does deploy HTTPS https://example.com/ - but a redirect from http is unlikely, at least until the .com TLD is HSTS preloaded (and this might not be for another 10 years or so).
Re: NeverSSL
#68Thank you neverssl. Since reading about it here I have used it countless times!
Re: NeverSSL
#69http://neverssl.com/changes > I also want to keep neverssl.com ad free, but as it's now costing me about $2,000 a year to host it, […] Wait, how could hosting a static website cost $2k/year?!
from the same page:
> it's just a simple website hosted on AWS
lots of ways of spending a lot of money on hosting a website on AWS. Hard to judge precisely without traffic numbers.
Re: NeverSSL
#70http://neverssl.com/changes > I also want to keep neverssl.com ad free, but as it's now costing me about $2,000 a year to host it, […] Wait, how could hosting a static website cost $2k/year?!
right! they need to set up a cloudflare proxy, or have github host it for example.