On 8/22/14, 11:37 PM, Nico Williams wrote: > On Fri, Aug 22, 2014 at 12:16:22PM -0700, Tim Bray wrote: >> >> What this means is that a client given an http: URL in a reference is >> always free to try out the HTTPS, just adding an S, and use result if the >> is successful. > It too late for that though: all too often the two resources are not the > same. > Indeed. Regrettably I suspect the worst offender would be the index itself for the site (e.g., http://www.example.com v. https://www.example.com). Eliot
Attachment:
signature.asc
Description: OpenPGP digital signature