https://blog.onetimesecret.com/ about onetimesecret HOT 3 CLOSED

The blog is at blog.onetimesecret.com. But yeah, I just checked and it's redirecting to https which isn't support on Github Pages.

Hmm, I wonder where though because Github's server isn't redirecting.

$ curl -I http://blog.onetimesecret.com
HTTP/1.1 200 OK
Server: GitHub.com
Date: Fri, 12 Apr 2013 03:08:22 GMT
Content-Type: text/html
Connection: keep-alive
Content-Length: 16296
Last-Modified: Tue, 12 Feb 2013 21:33:41 GMT
Expires: Fri, 12 Apr 2013 03:18:22 GMT
Cache-Control: max-age=600
Vary: Accept-Encoding
Accept-Ranges: bytes
Vary: Accept-Encoding

from onetimesecret.

I'm not sure why but for Firefox and Chrome the fix for this issue is to clear your browsing history. But it still leaves several open questions like why onetimesecret.github.io also redirected to HTTPS even though I'd never used that hostname before.

In any case, thanks for bringing it to my attention.

from onetimesecret.

For posterity, I'll also add that the problem was initially caused by the nginx configuration. The following header is a new feature in Firefox and Chrome that allows forcing HTTPS for all subdomains.

add_header Strict-Transport-Security "max-age=31536000; includeSubdomains";

from onetimesecret.