Hi Paul, El 2014-09-12 10:57:33, Paul Wise escribió: > Would it be possible for https-everywhere to always redirect to https > when TLSA DNS records exist?
As far as I know publishing a TLSA records only indicates what certificate is used on a given service. Especially it does not indicate, that every resource available on a given HTTP URI is also available on the corresponding HTTPS URI. E.g. a shop may use a TLSA record for the X.509 certificate of its secure webserver, but may only use https addresses for the payment processing. It may not allow browsing the web shop using https. Regards, Matthias -- Matthias Wimmer Contact details: http://matthias.wimmer.tel/
signature.asc
Description: Digital signature
_______________________________________________ HTTPS-Everywhere mailing list [email protected] https://lists.eff.org/mailman/listinfo/https-everywhere
