Broken HTTPS on https://reactjs.org

[mickeyreiss-visor]

I'm currently seeing an security certificate error on https://redux.js.org in Google Chrome Version 60.0.3112.113.

(edit: incorrect url)

[timdorr]

The docs site doesn't work in HTTPS. It's hosted by GitHub, so they don't have a cert for js.org.

[indus]

@timdorr JS.ORG is using Cloudflare and they provide "Universal SSL" - so it is easily possible to get HTTPS.

Back then when the "redux" subdomain was added to JS.ORG, SSL support was an opt-in. But you didn't took the option. Now it is the default, but owners of "old" subdomains have to make a PR to change it.
The reason for so little enforcement is that pages may show mixed-content warnings if e. g. paths to CSS where set absolute or other non-HTTPS content was included.
So switching would be easy but it has to be triggered by you. Just file a PR that removes the comment in that line

I'm writing to you because @jlebensold asked me on twitter why you don't have HTTPS

[timdorr]

Hmm, looks like we also need to update that URL, since the rackt org (since disbanded) has been typosquated. Thanks for the heads up!