Keep Server Online
If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.
or
A donation makes a contribution towards the costs, the time and effort that's going in this site and building.
Thank You! Steffen
Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
| |
|
 Topic: Closing HTTP on a HTTPs run site |
|
| Author |
|
puertoblack2003
Joined: 31 Jul 2009
Posts: 121
Location: U.S
|
 Posted: Mon 03 Jul '17 21:10 Post subject: Closing HTTP on a HTTPs run site |
 |
|
| I'm just curious , is it a good practice to eliminate port 80 http while my site runs https.? |
|
| Back to top |
|
mraddi
Joined: 27 Jun 2016
Posts: 152
Location: Schömberg, Baden-Württemberg, Germany
|
| Posted: Tue 04 Jul '17 20:06 Post subject: |
|
|
For user's experience I would propose to create a redirect from http to https if your site is running on https.
This way the user may enter "www.example.org" (without http:// or https://), the browser tries http:// automatically and gets redirected to the https://-URL.
For security reason you should point the webserver's document-root to an empty (or not existing) directory so that you don't expose sensitive data unencrypted if you have some misconfiguration in your http->https-redirect. |
|
| Back to top |
|
|
|
|
|
|
