Introducing the Daily Lather site!

Just hopped over to take a peek using the link on BoarderPhreak’s signature, and the main landing page is showing as https for me.

it definitely was not serving the site over https when I made the comment.  are you using hsts?

Sure am. And a test just showed it's working fine.

In fact, it's impossible NOT to use HTTPS as I redirect all HTTP to it.

Just hopped over to take a peek using the link on BoarderPhreak’s signature, and the main landing page is showing as https for me.

BoarderPhreak, when I use the link in your signature (on my iPad), the little lock shows in your address.  However, if I use the link you gave us in your very first post in this thread, the lock is not there.  I have no idea why, since both seem to take me to the same place.  andrewjs18which way did you go to BoarderPhreak's site?

Freddy is correct. the URL in your OP takes you to your site without HTTPS. if I run curl against the domain name, it looks like you haven't set up a redirect for dailylather.com. you do seem to have one set up for www.dailylather.com

Ahh, I see what's going on. Yeah, curl doesn't show the redirect - but it works in browsers.

The reason this looks odd is because of the complex nature of the back-end. Nginx terminates SSL ahead of Varnish and Apache, which serve the cached content, replying in SSL and HTTP/2. The redirect of www. is easy because nothing will ever respond there. The domain without is trickier because of the aforementioned layering.

Ahh, I see what's going on.  Yeah, curl doesn't show the redirect - but it works in browsers.

The reason this looks odd is because of the complex nature of the back-end.  Nginx terminates SSL ahead of Varnish and Apache, which serve the cached content, replying in SSL and HTTP/2.  The redirect of www. is easy because nothing will ever respond there.  The domain without is trickier because of the aforementioned layering.

it doesn't though...if I type in dailylather.com in google chrome, it does not redirect me to the https version of the site.

that said, I'm glad you see where the problem lies. good luck in getting it worked out!

To both BoarderPhreak and andrewjs18, I fully appreciate that both of you know what the heck you are talking about but, hey, there are a bunch of us alter cockers (old $HittEr$) who are clueless.  Any chance you might speak in English?

it doesn't though...if I type in dailylather.com in google chrome, it does not redirect me to the https version of the site.

that said, I'm glad you see where the problem lies. good luck in getting it worked out!

Hmm, it does in Firefox and Safari... I'll look into it more.