Force https, can for example use https://letsencrypt.org/ for certificate [closed]

Question

For security for both project-gc and its users, I recommend forcing https for project-gc.com.

For a good talk about the issue: https://www.youtube.com/watch?v=YMfW1bfyGSY

Talk is from Google I/O 2016

Comments

great idea, I'm voting for it!

---

project-gc.com does not need a certificate from letsencrypt, it has one from Comodo already. If you just write in https:// instead of http:// you will be served the https version of project-gc. There will be quite a number of insecure (unencrypted) elements on the page, but the page itself will be encrypted.

---

If you look at my suggestion one more time, you will see that it I wrote: "forcing https for project-gc.com".

Using Letsencrypt was a suggestion.

---

@kro8: Yes, I am aware that forcing https was your suggestion. If you look at my comment one more time you can see that I am not commenting on that part. I am merely pointing out that project-gc already has a TLS certificate from Comodo.

---

Here is an article on http vs https https://www.troyhunt.com/https-adoption-has-reached-the-tipping-point/

---

This is an old question from 2016

---

Thanks for closing it.

Answer 1

Project GC is using only HTTPS for some years now.

Answer 2

I'm not able to open PGC with http. On no device.

It isn't possible, it always forces HTTPS.

Which Browser allows you to connect unencrypted and what's the version?

Comments

This does not answer the question.

---

I think I do.

I explained that today with actual browsers it isn't possible to establish a http connection to PGC.

Additionally I personally offered the support to test the scenario with the users browser. So I had to ask for the browser and version.

I was not aware that you opend a 4 year old post while writing the topic ist also solved for some years...

My Vote Up for your post isn't worth in this case.
Unfortunately I can't withdraw it :(

But I'll Vote up the Question of kro8 because of the very good suggestion and sensitization of the http/s topic! Thanks!

---

That's part of answering to understand the question. If you end your answer with question mark, it is a good candidate for a comment.
Yes, it is 4 years old from the time when pgc was accessible only through http (or also ... not sure now). I noticed it during reviewing of the unanswered list (for the outdated checker requests) and as it is something that was solved and is relevant also today so I decided to remove it with answer rather than leave it there for more years or close it completely. If you do not like it, please suggest a better way.