ruby on rails 3 - Disabling SSL for a Heroku App -

-

i changed domain rails app have running on heroku. redirected original new one, , last couple of months have been running ssl on both. tried remove ssl original domain since redirect.

i did thought should:

  • turned off ssl in app config.force_ssl = false in production.rb
  • changed dns alias , cname point "myapp.herokuapp.com"
  • removed ssl endpoint , certs

if go myapp.herokuapp.com, fine, if go myapp.com, or www.myapp.com automatically tries take me secure version of site, https://myapp.com, , standard security error warning browser.

am missing something? caching issue? take time dns change kick in? i've tried on few machines/browsers, , issue consistent across of them.

worst case, can add ssl endpoint on, seems overkill.

config.force_ssl = true enables strict transport security header(hsts) max-age of 1 year. see issue. such header forces browsers support contact server on https 1 year. prevent attacks in man in middle downgrades https connection http.

moving out of https production sites served hsts not easy. should keep site served on https , return hsts header max-age=0 reset 1 year setting. problem decide how long need keep https. absolutely sure clients switched, should 1 year. may decide shorter period, @ risk of breaking site clients visiting infrequently.


Comments

Post a Comment

Popular posts from this blog

html5 - What is breaking my page when printing? -

-
Image
i have questioner , don't know why when printing it's creating break before first question. live demo (link) i able resolve issue removing fieldset container had wrapped in.. having fieldset element causing of fields grouped together, , since not fit on first page, being pushed second page. removing fieldset element, able firefox print first 2 questions on page 1 identically chrome. it seems not new problem firefox , fieldset not playing nice found old bugzilla ticket 2008 has persisted , still being commented on in 2014 (link) if retaining fieldset important, found solution else came here (link) <script type='text/javascript'> $(window).bind('beforeprint', function(){ $('fieldset').each( function(item) { $(this).replacewith($('<div class="fieldset">' + this.innerhtml + '</div>')); } ) }); $(window).bind(
Read more

html - Unable to style the color of bullets in a list -

-
i'm trying change colour of list points it's not working? <div class="mobile-menu" id="mobile-menu"> <div id="mobile-menu-links"> <h4>general:</h4> <ul class="mobile-menu-links"> <li><a href="">news</a></li> <li><a href="">the boring rules!</a></li> <li><a href="">the rankings</a></li> </ul> .mobile-menu #mobile-menu-links ul{ list-style-type: none; margin:0; padding-left:3%; } .mobile-menu #mobile-menu-links ul li{ padding-bottom:2px; border-bottom:1px solid #bababa; } if add color:red in either of 2 css declarations, doesn't change colour. please note html closed in document, copi
Read more

c# - must be a non-abstract type with a public parameterless constructor in redis -

-
when save object, got below error must non-abstract type public parameterless constructor in order use parameter 't' in generic type or method 'servicestack.redis.redisclient.store<t>(t) redisclass.getinstnace().store(msg); // error here redisclass.getinstnace().save(); as third party's class, can not edit how save object? could create wrapper around third party object call constructor, store wrapper? e.g. public class mywrapper { public thirdpartyobject thirdpartyinstance { get; set; } public mywrapper() { thirdpartyinstance = new thirdpartyobject("constructors"); } }
Read more