http://qs321.pair.com?node_id=11108982


in reply to HSTS policy breaks cpan utility on Windows

HSTS stands for "HTTP Strict Transport Security". Its defined in RFC6797

It has about 50 pages, but the gist of it is "Webmasters can declare through HTTP headers that they want to protect their users and only allow secured connections". Which frankly is a very good idea - i'd probably throw a party if the IETF declares unencrypted traffic completely illegal and bans it from existance.

perl -e 'use Crypt::Digest::SHA256 qw[sha256_hex]; print substr(sha256_hex("the Answer To Life, The Universe And Everything"), 6, 2), "\n";'

Replies are listed 'Best First'.
Re^2: HSTS policy breaks cpan utility on Windows
by Don Coyote (Hermit) on Nov 21, 2019 at 14:55 UTC

    acronym explained ++

    Surely encryption is out of scope for HTTP. That's the reason for https. The user should declare which protocol they want to use, and the provider which are available, where required.

      rt://130819. The end user may not be aware of the underlying issues, a https default makes sense, forcing those who understand the issue to make the change where appropriate.

        Default to the secure option is fair.