If https site responds with 404, there is no way to turn off HTTPS-only mode
Categories
(Core :: DOM: Security, enhancement, P3)
Tracking
()
People
(Reporter: mozbugz, Unassigned)
References
(Blocks 1 open bug)
Details
(Whiteboard: [domsecurity-backlog2])
With HTTPS-Only mode on, going to http://leader.smedia.com.au/manningham/ redirects to https://leader.smedia.com.au/manningham/ as expected, but that site actually responds with HTTP Error 404 (Not Found)!
If I turn off HTTPS-Only, I can go to http://leader.smedia.com.au/manningham/ and read the local newspaper there.
So this is a site that does support https, but only responds with 404s, while the http site works fully.
Sure it's strange, but it would be nice if there was a way to get around this problem.
According to https://support.mozilla.org/en-US/kb/https-only-prefs?as=u&utm_source=inproduct#w_turn-off-https-only-mode-for-certain-sites , from a site that doesn't support https, it's possible to click on the lock icon next to the address, and turn off HTTPS-Only mode from there.
It would be nice if this was also present for sites that seem to support https, so I could choose to see the http site instead.
|
||
Updated•4 years ago
|
Description
•