Replying to Avatar Pablo Xannybar

nostr:npub1nxy4qpqnld6kmpphjykvx2lqwvxmuxluddwjamm4nc29ds3elyzsm5avr7 confirmed they're fixing the HTTP issue πŸ‘Œ

Shouldn't I get a small bug bounty? πŸ˜…

Well... looks like it loads now since your pic shows.

Good quick find!

Reply to this note

Please Login to reply.

Discussion

Oh no, just the https works. I see. Thats what it was about. Thats why you were mentioning hsts

Yeah if they had HSTS this obviously still wouldn't be optimimal config but it'd mitigate many of the privacy and security risks.

This should obviously also be combined with a standard 304 redirect.

Im surprised http doesnt redirect to https as it's s not too hard to setup (though I use Traefik). Been meaning to figure out hsts myself sometime.

It would normally redirect in a browser, but since it is pasted in a note, and we are seeing you the link without https, it is saved in the note and still accessible.. nostr:npub137c5pd8gmhhe0njtsgwjgunc5xjr2vmzvglkgqs5sjeh972gqqxqjak37w made some major updates to the upload API, will fix soon..

Fixed now, forcing https to be returned 🐢🐾🫑

Props for fixing so quickly!

I've been changing the links to HTTPS manually on my end. Don't know if it's fixed yet.

Yeah nah it's not. But I trust they will today.

And thanks man! Actually noticed it days ago but didn't say anything cuz I expected it to be fixed quickly.