Enforce HTTPS

[marcoroth]

Something is currently not right with HTTPS. We should see if we can resolve the SSL certificate isuse mentioned in #492 and maybe also setup automatic redirects to enforce HTTPS for convenience.

[jonallured]

Something is currently not right with HTTPS.

What's not right? I just tried with HTTP and it was redirected to HTTPS but maybe I'm missing something? 🤔

The SSL is setup on the Digital Ocean box with Let's Encrypt and it has Just Worked ™️ for many years. 🤷

[jonallured]

JK! I totally forgot that this is a GH pages project - def not deploying via Digital Ocean. 😝

[jonallured]

Ohhhh, I think I see what's going on - over on #492 the report that's being referenced uses https://WWW.rubyconferences.org rather than https://rubyconferences.org. I think if the WWW is removed then all is well:

https://www.ssllabs.com/ssltest/analyze.html?d=rubyconferences.org&latest

[marcoroth]

Ah I see. The first 3 redirect you to https://rubyconferences.org, while https://www.rubyconferences.org doesn't:

No.	In	Out
1.	http://rubyconferences.org	https://rubyconferences.org
2.	https://rubyconferences.org	https://rubyconferences.org
3.	http://www.rubyconferences.org	https://rubyconferences.org
4.	https://www.rubyconferences.org	doesn't resolve

I think we should either drop the 3. option (http://www.rubyconferences.org) or make the 4. one work.

[adarsh]

Agree with all of the above, I'll make the edit.

Aside: What does option 2 do?

[marcoroth]

The table was just to show what you get when you enter the URL in the In column into your address bar and the Out column shows where it takes you.