HTTPS

[lgarron]

https://alg.cubing.net

Because security, man.

I don't mind the setup time (or the money, but StartSSL is free). Concerns:

• [ ] Commitment to support HTTPS links permanently (biggest concern).
• [ ] Cookie sharing with rest of cubing.net
  • [ ] But cubing.net already hosts multiple sites, and might host some on a different server some day.
  • [ ] Sharing between cubing.net root and alg.cubing.net is probably fine, though.
• [ ] CORS/interop with other sites, but alg.cubing.net shouldn't be pulling arbitrary sources, and HTTPS can be included safely everywhere.

[lgarron]

Working. New question: always redirect to HTTPS?

[lgarron]

https://alg.cubing.net/ now uses HTTPS (through Let's Encrypt) and HSTS.