General Discussion • Re: Enforced https on public sites

It’s a bit funny how MC is talking about public sites being forced to use HTTPS… meanwhile the Pale Moon site (as far as I can tell, for the main domain at least…) is a public site yet is forcing HTTPS.

It isn't.

However, if you tell the web server to "upgrade insecure requests" with the HTTP request header, then it will do what you ask and switch to HTTPS.

If you don't send the header though, and go to http:// then it will just serve the page unencrypted.