AnsweredAssumed Answered

Make actual use of SSL

Question asked by pmey on Jan 3, 2016
Latest reply on Jan 6, 2016 by Rob Moss

I'm sorry if this is a stupid question but here I go:

How can a site get an A+ rating when it never redirects the user to the encrypted version?

Example:

https://www.ssllabs.com/ssltest/analyze.html?d=obscuredfiles.com

Obscuredfiles.com gets an A+ rating. If I however visit http://obscuredfiles.com/ it doesn't even direct me to the SSL version.

This site is getting an A+ rating when most users will probably never make use of the encryption anyways. What really is the point of any of this then?

Shouldn't this be taken into consideration when rating websites?

Outcomes