On: Why Static Websites Need HTTPS

[thaniri]

You can set up your apache/nginx or whatever webserver to redirect http requests to https. That way you can still link to your website with an http:// URL.

[iamben → thaniri]

Appreciated, but this is a hacky solution. If you use the graph explorer, both the http and https addresses have different counts. It's very frustrating - shouldn't be that way.

[prophesi → iamben]

Add your site to the HSTS Preload List, then it'll be very unlikely to have any HTTP hits.

[iamben → prophesi]

Didn't realise that existed. Very useful thanks!

But again, it's not exactly up there for John Everyman - and it doesn't sort Facebook having different share counts for the https and http domain.

[prophesi → iamben]

True. And you have to be extra careful with HSTS Preloading; if one of your subdomains breaks because of HTTPS, it'll be a pain to get your domain taken off the list.