<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<div style="16px" text-align="left">Feb 26, 2019, 2:45 PM by iknowjoseph@gmail.com:<br></div><blockquote class="tutanota_quote" style="border-left: 1px solid #93A3B8; padding-left: 10px; margin-left: 5px;"><div dir="ltr"><div dir="ltr"><div style="16px" text-align="left">I can see in the comments of your diary entry that you were told about HSTS recently. I'm not trying to be offensive, but that shows you're not a HTTPS / web security expert. Do you really think you're the person to be making world wide automatic changes to the database?<br></div></div></div></blockquote><div style="16px" text-align="left">Ekhmm? Why you think that running OSM bot requires being a HTTPS / web security expert?<br></div><div style="16px" text-align="left"><br></div><div style="16px" text-align="left">Making designed search-replace scripts requires no knowledge from this fields.<br></div><div style="16px" text-align="left"><br></div><blockquote class="tutanota_quote" style="border-left: 1px solid #93A3B8; padding-left: 10px; margin-left: 5px;"><div dir="ltr"><div dir="ltr"><div style="16px" text-align="left">Again, are you checking https certificates? Do you know that the https site actually works?<br></div></div></div></blockquote><div style="16px" text-align="left">Is it really useful? If http redirects to https then what is the difference here?<br></div><blockquote class="tutanota_quote" style="border-left: 1px solid #93A3B8; padding-left: 10px; margin-left: 5px;"><div dir="ltr"><div dir="ltr"><div style="16px" text-align="left">Are you checking the redirect code? Do you differentiate between temporary and permanent redirects?<br></div></div></div></blockquote><div style="16px" text-align="left">Good question. Only permanent ones should be followed.<br></div><blockquote class="tutanota_quote" style="border-left: 1px solid #93A3B8; padding-left: 10px; margin-left: 5px;"><div dir="ltr"><div dir="ltr"><div style="16px" text-align="left">Are redirects even that bad? If I was to set up some careful redirects and have them ignored by a bot that thinks it knows better, I may be a little annoyed. What about geographic redirects? <a href="http://example.com" rel="noopener noreferrer" target="_blank">http://example.com</a> becomes <a href="https://de.example.com" rel="noopener noreferrer" target="_blank">https://de.example.com</a>, for example.<br></div></div></div></blockquote><div style="16px" text-align="left">I asked about this - redirects changing anything more than changing "http" to "https" are supposed to be skipped.<br></div><blockquote class="tutanota_quote" style="border-left: 1px solid #93A3B8; padding-left: 10px; margin-left: 5px;"><div dir="ltr"><div dir="ltr"><div><div>I can see that you want to promote https adoption, but I can't see that the OSM database is the place to do it.<br></div></div></div></div></blockquote><div style="16px" text-align="left">I see it as "automatically fixing outdated data that can be fixed using an automated script".<br></div><div style="16px" text-align="left"><br></div> </body>
</html>