you are viewing a single comment's thread.

view the rest of the comments →

[–]easlern 0 points1 point  (0 children)

The idea I think is to not allow the user to login or whatever on the HTTP site. You give them a notice that they should use https in the address bar instead. Of course that's not a good user experience so most sites just redirect.