307s (old, probably outdated)

Warning: This page is pretty old and was imported from another website. Take any content here with a grain of salt.

HTTPS & HSTS: 301, 302, or 307? If the combination of these letters & numbers mean anything to you, you might be curious to know why Chrome shows you a 307 redirect for HSTS pages.

In the end, it’s pretty easy. After seeing the HTTPS URL with the HSTS header (for example, with any redirect from the HTTP version), Chrome will act like it’s seeing a 307 redirect the next time you try to access the HTTP page. Your server’s not returning a 307, Chrome is just showing it to you as such to explain that it’s doing the redirect for you. You can confirm that by looking at the size of the response – 0 bytes for the 307 “redirect.” In other words, the 307 isn’t actually a redirect at all, it’s just a placeholder.

This is not the redirect you’re looking for.

Original at https://plus.google.com/+JohnMueller/posts/SjVcwYGGujy

Warning: This page is pretty old and was imported from another website. Take any content here with a grain of salt.

Comments / questions

There's currently no commenting functionality here. If you'd like to comment, please use Twitter and @me there. Thanks!

Tweet about this - and/or - search for latest comments / top comments

Related pages