racket / racket-pkg-website

A frontend for the Racket Package Catalog.
Other
11 stars 16 forks source link

Redirect to https if the user lands via http #12

Closed tonyg closed 8 years ago

tonyg commented 8 years ago

Apparently in the cloudfront settings (?) there may be something labelled "Viewer Protocol Policy: Redirect HTTP to HTTPS" which might do the trick.

jeapostrophe commented 8 years ago

I couldn't find the setting on cloudflare

On Wed, Aug 3, 2016 at 7:17 AM, Tony Garnock-Jones <notifications@github.com

wrote:

Apparently in the cloudfront settings (?) there may be something labelled "Viewer Protocol Policy: Redirect HTTP to HTTPS" which might do the trick.

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/tonyg/racket-pkg-website/issues/12#issuecomment-237208572, or mute the thread https://github.com/notifications/unsubscribe-auth/AAOM-vkLuWuAc0sq1tBiLDQElk3c3FIzks5qcHi8gaJpZM4JbOlk .

Jay McCarthy Associate Professor PLT @ CS @ UMass Lowell http://jeapostrophe.github.io

       "Wherefore, be not weary in well-doing,
  for ye are laying the foundation of a great work.

And out of small things proceedeth that which is great."

tonyg commented 8 years ago

Maybe I was looking at Cloudfront instructions instead of Cloudflare instructions. Maybe this is how to do it?

jeapostrophe commented 8 years ago

We are not allowed to have more than 3 page rules on the whole account and are currently using all of them. This would be $20/month

Jay

On Tue, Aug 9, 2016 at 3:26 PM, Tony Garnock-Jones <notifications@github.com

wrote:

Maybe I was looking at Cloudfront instructions instead of Cloudflare instructions. Maybe this https://support.cloudflare.com/hc/en-us/articles/200170536-How-do-I-redirect-all-visitors-to-HTTPS-SSL- is how to do it?

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/tonyg/racket-pkg-website/issues/12#issuecomment-238663441, or mute the thread https://github.com/notifications/unsubscribe-auth/AAOM-qyEoeSBRqFgx0GxICnhCCQNbfmfks5qeNR4gaJpZM4JbOlk .

Jay McCarthy Associate Professor PLT @ CS @ UMass Lowell http://jeapostrophe.github.io

       "Wherefore, be not weary in well-doing,
  for ye are laying the foundation of a great work.

And out of small things proceedeth that which is great."

tonyg commented 8 years ago

Ah, OK. While having https-everywhere would be nice, it's not mandatory for the static portion of the site, so that's fine. The remaining issue, then, is that when accessed via http://, the CORS stuff kicks in for the https references. I'll fiddle with the URLs to see if I can get the various planets to align.

tonyg commented 8 years ago

Which I guess folds this issue in to #10. Closing.