TLS redirect security

A common technique to help TLS migrations is providing a redirect. For example, this blog, hosted on Wordpress.com, redirects all HTTP requests on port 80 to one using TLS on port 443. $ curl -v http://virtualandy.wordpress.com * Rebuilt URL to: / * Trying 192.0.78.13... * TCP_NODELAY set * Connected to virtualandy.wordpress.com (192.0.78.13) port 80 (#0) > GET / HTTP/1.1 > Host: virtualandy.wordpress.com > User-Agent: curl/7.54.0 > Accept: */* > Referer: > < HTTP/1....

February 11, 2020 · itsahill00