/plushcap/analysis/fly-io/always-be-connecting-with-https

Always Be Connecting (With HTTPS)

What's this blog post about?

Making sure users connect to the HTTPS secured version of a site is crucial due to search engines marking down non-HTTPS sites and users adopting tools for more secure browsing. Fly automatically upgrades connections to HTTPS when creating an app, but when using custom domains with self-provided certificates, developers need to upgrade HTTP connections manually. This can be done by detecting the protocol used in incoming connections through headers like X-Forwarded-Proto and redirecting non-HTTPS connections to their HTTPS equivalents. Examples of how to implement this are provided for Go, Node (and Express), and other applications. Automating this process is being considered by Fly but has not been implemented yet.

Company
Fly.io

Date published
Sept. 11, 2020

Author(s)
Dj Walker-Morgan

Word count
799

Hacker News points
None found.

Language
English


By Matt Makai. 2021-2024.