Hacker News new | past | comments | ask | show | jobs | submit login

I didn't get it what am I missing?



The OP link is over https, which appears to work fine but only for redirecting you back to http


Check the output from curl. HTTPS is working but is merely redirecting to a page saying HTTPS is not working.

    $ curl -v https://www.bom.gov.au/
    *   Trying 104.78.177.116...
    * TCP_NODELAY set
    * Connected to www.bom.gov.au (104.78.177.116) port 443 (#0)
    * ALPN, offering h2
    * ALPN, offering http/1.1
    * successfully set certificate verify locations:
    *   CAfile: /etc/ssl/certs/ca-certificates.crt
      CApath: /etc/ssl/certs
    * TLSv1.3 (OUT), TLS handshake, Client hello (1):
    * TLSv1.3 (IN), TLS handshake, Server hello (2):
    * TLSv1.2 (IN), TLS handshake, Certificate (11):
    * TLSv1.2 (IN), TLS handshake, Server key exchange (12):
    * TLSv1.2 (IN), TLS handshake, Server finished (14):
    * TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
    * TLSv1.2 (OUT), TLS change cipher, Client hello (1):
    * TLSv1.2 (OUT), TLS handshake, Finished (20):
    * TLSv1.2 (IN), TLS handshake, Finished (20):
    * SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
    * ALPN, server accepted to use http/1.1
    * Server certificate:
    *  subject: C=AU; ST=VIC; L=Docklands; O=Bureau of Meteorology; CN=*.bom.gov.au
    *  start date: Jun 10 00:00:00 2020 GMT
    *  expire date: Sep  9 12:00:00 2021 GMT
    *  subjectAltName: host "www.bom.gov.au" matched cert's "*.bom.gov.au"
    *  issuer: C=US; O=DigiCert Inc; OU=www.digicert.com; CN=GeoTrust RSA CA 2018
    *  SSL certificate verify ok.
    > GET / HTTP/1.1
    > Host: www.bom.gov.au
    > User-Agent: curl/7.58.0
    > Accept: */*
    > 
    < HTTP/1.1 307 Temporary Redirect
    < Server: AkamaiGHost
    < Content-Length: 0
    < Location: http://www.bom.gov.au/akamai/https-redirect.html
    < Date: Wed, 02 Dec 2020 13:03:03 GMT
    < Connection: keep-alive
    < Server-Timing: cdn-cache; desc=HIT
    < Server-Timing: edge; dur=1
    < 
    * Connection #0 to host www.bom.gov.au left intact


Ha that's rediculous. Thanks for letting me know.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: