Skip to content

HSTS for typescriptlang.org #4

Not planned
Not planned
@lgarron

Description

@lgarron

www.typescriptlang.org supports HTTPS!

It would be pretty snazzy if typescriptlang.org went HTTPS only, and preloaded [HSTS](https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security:
https://hstspreload.org/?domain=typescriptlang.org

This would entail:

  • Fixing https://typescriptlang.org (HTTPS, no www) so that it doesn't hang.
  • Sending HSTS headers from typescriptlang.org and www.typescriptlang.org.
  • Submitting typescriptlang.org to the HSTS preload list.

I maintained the HSTS preload list in the past, so I'm happy to answer questions about recommended configurations and what they mean!

Thanks for any consideration,
»Lucas

Activity

lgarron

lgarron commented on Mar 21, 2019

@lgarron
Author
transferred this issue frommicrosoft/TypeScripton Jul 10, 2019
added
PlaygroundIssues that affect the Playground
and removed
PlaygroundIssues that affect the Playground
on Jul 10, 2019
added a commit that references this issue on Oct 31, 2020

Merge pull request #4 from microsoft/v2

8f01c2b
typescript-bot

typescript-bot commented on Apr 26, 2023

@typescript-bot
Collaborator

Hello! As per #2804, we are automatically closing all open issues. Please see #2804 for a description of what issues and PRs can be accepted going forward.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

      Development

      No branches or pull requests

        Participants

        @orta@lgarron@typescript-bot

        Issue actions

          HSTS for typescriptlang.org · Issue #4 · microsoft/TypeScript-Website