On 21/02/2019 13:41, Michal Novotny wrote:
I am not sure why
http://libravatar.org to
https://www.libravatar.org
redirect is bad. Can you, please, explain?
The reason for saying it should redirect with www first
and then to www after that if you want is to ensure that
libravatar.org is visited over https without a prefix so
that HSTS is recorded for all subdomains.
It's not essential if you only have a single name anyway
but if you're doing includeSubdomains then it may be, and
it is required for preload:
https://hstspreload.org/?domain=libravatar.org
Tom
--
Tom Hughes (tom(a)compton.nu)
http://compton.nu/