1018776 - google does NOT redirect Mobile browsers to HTTPS when entering HTTP, except for Safari iOS

Status: RESOLVED INVALID

(Web Compatibility :: Site Reports, defect)

Description

[italicmovement]

User Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0 (Beta/Release)
Build ID: 20140506152807

Steps to reproduce:

Type http://www.google.de into the address bar and hit enter.


Actual results:

Opened the Google Search website via http.


Expected results:

Opened the Google Search website via https.

Comment 1

[Mike Taylor [:miketaylr]]

It looks like Chrome Mobile also stays on the http site, but iOS gets a 302 to the https site. Unsure if this is a compat issue if Google doesn't bother to redirect Chrome Mobile.

$ http --print=hH GET http://www.google.com User-Agent:"$CHR"
GET / HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate, compress
Host: www.google.com
User-Agent: Mozilla/5.0 (Linux; Android 4.0.4; Galaxy Nexus Build/IMM76B) AppleWebKit/535.19 (KHTML, like Gecko) Chrome/18.0.1025.133 Mobile Safari/535.19

HTTP/1.1 200 OK
Alternate-Protocol: 80:quic
Cache-Control: private
Content-Encoding: gzip
Content-Type: text/html; charset=UTF-8
Date: Wed, 11 Jun 2014 02:55:47 GMT
Expires: Wed, 11 Jun 2014 02:55:47 GMT
P3P: CP="This is not a P3P policy! See http://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Server: gws
Set-Cookie: PREF=ID=85c95d2a99347560:FF=0:TM=1402455347:LM=1402455347:S=G55XvbYFTBZOKEVI; expires=Fri, 10-Jun-2016 02:55:47 GMT; path=/; domain=.google.com
Set-Cookie: NID=67=gbWqsF4urdURaWM67tMsce9I5Ap1TsLdFyXdi4nU2QBJ0_XpAH63_le271mFPs4tgUK0UBPAiBNbHsYoKJW2ZBaBVgqiVm0M5e7U2oMty3ul6oMbbPXKidulY3OddnGI; expires=Thu, 11-Dec-2014 02:55:47 GMT; path=/; domain=.google.com; HttpOnly
Transfer-Encoding: chunked
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block


$ http --print=hH GET http://www.google.com User-Agent:"$FFA"
GET / HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate, compress
Host: www.google.com
User-Agent: Mozilla/5.0 (Android; Mobile; rv:30.0) Gecko/30.0 Firefox/30.0

HTTP/1.1 200 OK
Alternate-Protocol: 80:quic
Cache-Control: private
Content-Encoding: gzip
Content-Type: text/html; charset=UTF-8
Date: Wed, 11 Jun 2014 02:56:17 GMT
Expires: Wed, 11 Jun 2014 02:56:17 GMT
P3P: CP="This is not a P3P policy! See http://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Server: gws
Set-Cookie: PREF=ID=93e77e38908b6237:FF=0:TM=1402455377:LM=1402455377:S=F410CgZcLPh01BE_; expires=Fri, 10-Jun-2016 02:56:17 GMT; path=/; domain=.google.com
Set-Cookie: NID=67=XAsPZ-dflwEJWh2RVDRmGntZtKQ4F880dmzCDqMhoFmIfRNKjvzd-qymA6zEn3sXglnaF6B0A1mN42D1OUTcVJTUQqbEQ5EznJdrbZ7RhQWP1aVrl0v2TBIvr2E5Q1kZ; expires=Thu, 11-Dec-2014 02:56:17 GMT; path=/; domain=.google.com; HttpOnly
Transfer-Encoding: chunked
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block


$ http --print=hH GET http://www.google.com User-Agent:"$IOS"
GET / HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate, compress
Host: www.google.com
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 6_0 like Mac OS X) AppleWebKit/536.26 (KHTML, like Gecko) Version/6.0 Mobile/10A5376e Safari/8536.25

HTTP/1.1 302 Found
Alternate-Protocol: 80:quic
Cache-Control: private
Content-Length: 231
Content-Type: text/html; charset=UTF-8
Date: Wed, 11 Jun 2014 02:55:54 GMT
Location: https://www.google.com/?gws_rd=ssl
P3P: CP="This is not a P3P policy! See http://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Server: gws
Set-Cookie: PREF=ID=cf6ad10df8ca1a12:FF=0:TM=1402455354:LM=1402455354:S=rohOdRbhmmqjRzmd; expires=Fri, 10-Jun-2016 02:55:54 GMT; path=/; domain=.google.com
Set-Cookie: NID=67=s_rQoPvtpmdW37W0D9N_cdPitlgbCcufMifuVaw9Fq5cjBptqTQKgJBfP5qS3Lhd92aleq9mgJVLWWaC-cEYa82-Jyz_eeJxFXfm1A9xSUA_loJz-4pr7_aoimuo9UNu; expires=Thu, 11-Dec-2014 02:55:54 GMT; path=/; domain=.google.com; HttpOnly
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block

Comment 2

[Mike Taylor [:miketaylr]]

Karl, what do you think?

Comment 3

[Karl Dubost💡 :karlcow]

This is also the case for Firefox OS (fwiw)
UCWeb too, Opera too.  
And indeed confirmed, they do redirect for Safari iOS. Opera Mini iOS does not get a redirect. :)

Searching online shows that people are confused by the "https://www.google.com/?gws_rd=ssl" address. :) People think they got a virus.

I propose to close this as INVALID, as it is not really a Web Compatibility issue, nor interoperability issue.