Yesterday I spent several hours trying to figure out why a dev website I am running on my
bitfolk vps under a non-standard port, kept failing to load in my main browser - every
time I visited it using http:// it kept directly requesting a https:// page .. which
doesn't exist.
I twigged fairly early (cos internet searchings) that it was probably
something HSTS related
(
https://www.globalsign.com/en/blog/what-is-hsts-and-how-do-i-use-it/) ..
but no amount of removing "jandj.vps.bitfolk.com" or
"jandj.vps.bitfolk.com:8002" from hsts ( vivaldi://net-internals/#hsts ) was
doing anything.
I eventually realised that the main
bitfolk.com itself is sending hsts-required headers,
and including all subdomains, which seems to trigger regardless of port :( Removing
bitfolk.com fixed it for now, though presumably it will return if I visit the toplevel
site again.
Any ideas if this can be worked around? (other than the obvious buy another domain / use
one of my other ones temporarily)
Jess