Home/Notes/HTTP to HTTPS: a field note from a garage
HTTP to HTTPS: a field note from a garage
8 Jun 2024
How a garage deals with HTTP to HTTPS — and what usually goes wrong.
The problem: a certificate that expires on a Sunday. The certificate chain breaks for a garage.
The real issue was not HTTP to HTTPS itself — it was a certificate that expires on a Sunday. One feeds the other, and fixing only the visible symptom means it comes back in three weeks.
We found a certificate that expires on a Sunday during a routine check of HTTP to HTTPS. The site had been leaking referrer data for six weeks before anyone noticed.
Half the meeting with a garage was explaining what HTTP to HTTPS is. The other half was agreeing that a certificate that expires on a Sunday should have been fixed a year ago.
The owner at a garage asked why HTTP to HTTPS matters. We showed them the error page their customers see when it breaks. That ended the conversation.
The best HTTP to HTTPS setup is the one nobody has to think about. For a garage, that means auto-renew, auto-redirect, and a monitoring ping every four hours.
Related notes
Tell us what you need.
Write a few lines about your project. We reply within one working day, usually with questions and a rough estimate.
hello@digitalserved.com