HSTS

[RiptideTempora]

Could you add an Hypertext Strict Transport Security header in the server config so compatible browsers will always redirect to https://www.hackthissite.org instead of http://www.hackthissite.org ?

[Kage]

Directive added to the load balancer and CDN.

[fashizzlepop]

I think a staff blog post may be in order?

[Kage]

Not really. I'd check this off as one of many 'silent updates'; little changes I make to tune the infrastructure that go relatively unnoticed. If I did a blog post about every little tuning I do, I'd be posting four or five times a day, every day or two.

I am noticing now that Chrome has re-cached HTS, it's automatically forcing me to use SSL, just from the HSTS header. That's kind of really neat. This is great because it forces SSL where supported browsers understand the header, but doesn't require SSL (such as a 301 redirect).

Excellent suggestion, Riptide. Thank you kindly.

[mShred]

Yeah, I was the one who liasoned Riptide's idea to Kage.. Credit taken, of course.