Re: DNS point to secure site, not the unsecure site

The 3rd party that hosts our ordering website says they were essentially
'forced' to install certificates because other distributors sites they host
had customers complaining that it was not secure.

They're going to do a redirect such that everyone that comes in to our
ordering site will automatically get the https:// site.

But they say there's a danger that "there may be issues with older
firewalls and proxies". Is that true? I would have thought that in this
day and age . . .



On Tue, May 8, 2018 at 10:42 AM, David Gibbs <david@xxxxxxxxxxxx> wrote:

On 5/8/2018 8:00 AM, Jeff Crosby wrote:

Subdomain meaning forwarding to. I did not state that in the prior email.

On Tue, May 8, 2018 at 8:25 AM, Jeff Crosby <jlcrosby@xxxxxxxxxxxxxxxx>
wrote:

There is only 1 site.

The hoster is suggesting I set up a subdomain on GoDaddy instead os using
an "A" record. Then I can point it to the secure site.

Seem reasonable? Downside?

Sure, a subdomain redirect is perfectly reasonable.

I do this for some of my domains ... if you visit http://ridewithdavid.com
it will redirect you to https://rwd.diabetessucks.net. This is handled
automatically by Google Domains.

The only downside is it's harder to get SSL on the initial domain. In my
example, you can't go to https://ridewithdavid.com because Google doesn't
offer SSL redirects. If I wanted to, I could setup my own redirect with a
LetsEncrypt certificate ... but I'm lazy. :)

david


--
David Gibbs
midrange.com

IBM i on Power Systems: For when you can't afford to be out of business!

I'm riding 615 miles (Yes, you read that right) in the American Diabetes
Association's Tour de Cure to raise money for diabetes research, education,
advocacy, and awareness. You can make a tax deductible donation to my ride
by visiting https://lsteml.diabetessucks.net.

See where I get my donations from ... visit https://lsteml.diabetessucks.n
et/map for an interactive map (it's a geeky thing).

I may have diabetes, but diabetes doesn't have me!
--
This is the PC Technical Discussion for IBM i (AS/400 and iSeries) Users
(PcTech) mailing list
To post a message email: PcTech@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/pctech
or email: PcTech-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/pctech.