webrepl icon indicating copy to clipboard operation
webrepl copied to clipboard

Hosted webrepl can't work due to HSTS

Open ulope opened this issue 4 years ago • 1 comments

The server serving micropython.org is configured to send a HSTS header. This means all connections are forcibly upgraded to TLS (which in general is a good thing).

However the webrepl doesn't work over HTTPS (#15), therefore the hosted webrepl isn't usable for anyone.

Since the HSTS header doesn't set includeSubdomains it should be possible (depending on the hosting setup) to host the webrepl at e.g. webrepl.micropython.org without HTTPS.

ulope avatar Aug 13 '21 12:08 ulope