Posted by jgx0 1 day ago
Isn't there a dedicated site called nohttps or something? NeverSSL? I just tried http NeverSSL, and it redirected me to an https page with a random hostname and an Amazon SSL certificate!
Does example.com still function this way, with http and no HSTS? I noticed that my Chrome browser was immediately redirected in the customary way.
Are you perhaps on an untrusted network which is spoofing that url to make it redirect somewhere else?
If this is a joke, it's over my head. If not, I'm not knowledgeable enough in this space to pass judgement, but that would seem crazy to me. Like the owner should consider a domain name change :)
Kinda weird setup!
Edit: okay, the subdomains also have SSL. I guess the random subdomain thing is to make sure it hasn’t been cached in a “this site has HTTPS” list. The HTTPS is needed, of course, to please the browser makers, as the parent says.
This is very useful, thanks for sharing!
example.com, example.net, example.org, and example.edu, along with .example, are all classified as the same type of name, reserved for documentation purposes.
Furthermore, there are IPv4 and IPv6 addresses that are reserved for documentation purposes! You never need to write live addresses, or even private RFC 1918 addresses!
IANA's email about why example.com changed
When a newbie learning programming sees this message, then this is a downer.
"Hello World from example.com [more info]"
A newbie shouldn't test their programs using example.com