Listen "Episode 431 - Redirecting HTTP to HTTPS"
Episode Synopsis
Josh and Kurt talk about a blog post titled "Your API Shouldn't Redirect HTTP to HTTPS". It's an interesting idea, and probably a good one. There is however a lot of baggage in this space as you'll hear in the discussion. There's no a simple solution, but this is certainly something to discuss. Show Notes Your API Shouldn't Redirect HTTP to HTTPS Hacker News discussion HSTS Section 5.1
More episodes of the podcast Open Source Security
AIBOM, CBOM, and HBOM with Allan Friedman
29/06/2026
Sustaining Open VSX with Mike and Thabang
15/06/2026
Hacking your CI/CD with François Proulx
08/06/2026
Open source verification with Sal Kimmich
01/06/2026
Vulnerability disclosure with Casey Ellis
25/05/2026
F-Droid the open app store with Hans
18/05/2026
