<< November 2014 | Home | Januar 2015 >>

HTTP and HTTPS - mixed mode configuration

why it doesn't work and how to fake it

tl;dr: Are you tasked with setting up a webserver that must be accessible in both http and https?

When somebody demands that this mixed mode must be possible, here are some arguments why you shouldn't give in (because in general it does not work - at least not as it is expected to work) and how to use a neat workaround that can help you sleep better when you can't make the argument to go https only.