Secure Web Site

[Puybaret]

I spent some time today to configure Sweet Home 3D web site with https.
So it's finally available at https://www.sweethome3d.com and still from http://www.sweethome3d.com
If you see anything that doesn't work as expected, please tell me so I can fix it.

[shoulders]

All is working well. I no longer use http on my websites so I use the following to get rid of any old links.

Code: Select all

RewriteEngine On

## If https is off
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]

## Redirect non-www to www
RewriteCond %{HTTP_HOST} !^www\. [NC]
RewriteRule ^(.*)$ https://www.%{HTTP_HOST}/$1 [R=301,L]

[Puybaret]

I don’t agree. Forcing everyone to use https might prevent people with old systems from visiting a web site.

[shoulders]

Fair enough and I will leave this up to you and I appreciate this software.

Midnight reading

TLS1.0 and TLS1.1 have been retired and pretty much will of killed of all 'old' remaining devices. TLS 1.3 is now the new standard with TLS 1.2 holding on for now.

Most devices support https, it is just the underlying transport protocol (TLS/SSL) that determines device compatibility with https.

https://support.globalsign.com/ssl/gene ... patibility