{"action":"created","issue":{"url":"https://api.github.com/repos/certbot/certbot/issues/2799","repository_url":"https://api.github.com/repos/certbot/certbot","labels_url":"https://api.github.com/repos/certbot/certbot/issues/2799/labels{/name}","comments_url":"https://api.github.com/repos/certbot/certbot/issues/2799/comments","events_url":"https://api.github.com/repos/certbot/certbot/issues/2799/events","html_url":"https://github.com/certbot/certbot/issues/2799","id":147240225,"number":2799,"title":"safe option - permanent redirect using 301","user":{"login":"eleumik","id":4514393,"avatar_url":"https://avatars.githubusercontent.com/u/4514393?v=3","gravatar_id":"","url":"https://api.github.com/users/eleumik","html_url":"https://github.com/eleumik","followers_url":"https://api.github.com/users/eleumik/followers","following_url":"https://api.github.com/users/eleumik/following{/other_user}","gists_url":"https://api.github.com/users/eleumik/gists{/gist_id}","starred_url":"https://api.github.com/users/eleumik/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/eleumik/subscriptions","organizations_url":"https://api.github.com/users/eleumik/orgs","repos_url":"https://api.github.com/users/eleumik/repos","events_url":"https://api.github.com/users/eleumik/events{/privacy}","received_events_url":"https://api.github.com/users/eleumik/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/certbot/certbot/labels/apache","name":"apache","color":"fbca04"},{"url":"https://api.github.com/repos/certbot/certbot/labels/security%20enhancements","name":"security enhancements","color":"ffb8f0"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2016-04-10T16:53:10Z","updated_at":"2016-06-03T17:53:59Z","closed_at":null,"body":"Hi,\r\nUsing `--apache` I selected the 'safe' option to always use HTTPS, then I went with my browser to test it, everything fine.\r\n\r\nProblems started when I wanted to remove this option (because of IE6 not working). Firefox and Chrome strong cache the redirect and do not hit anymore the http version of the site, going directly to https. The effect is that **a browser that got the redirect once does not go anymore to the http version of the site**. If I use an other browser all is fine.\r\n\r\nI tried to solve the problem with Firefox just waiting (days), then disabling / clearing the cache but still not succeeding, see the many \"does not work for me\" in  http://superuser.com/questions/467999/clear-301-redirect-cache-in-firefox \r\n\r\nI read more about it in http://getluky.net/2010/12/14/301-redirects-cannot-be-undon/ \r\n\r\n> If you’re lucky, this is an intranet app and you can instruct all users to manually clear their browser caches. If it’s public and this was a big redesign, your users may never even be able to get to a valid page if you just dump the old files on the webserver and they’re all redirected via 301s.\r\n\r\nIs there a reason to use a permanent 301 redirect ? Looks like it can cause problems if one wants to go back to http.\r\n\r\nThe alternative would be using [302](https://tools.ietf.org/html/rfc7231#section-6.4.3). \r\n\r\nTo use 302, the output Apache configuration should be changed in this way:\r\n\r\n```\r\nRewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [L,QSA,R=302]\r\n```\r\n\r\nI read now that there are search engines related reasons to use 301, see https://www.hochmanconsultants.com/301-vs-302-redirect/ so maybe it could be an idea to allow both options, 302 for trying, and 301 once a decision has been taken, otherwise I suggest to use 302 since 301 caused some troubles to me.\r\n"},"comment":{"url":"https://api.github.com/repos/certbot/certbot/issues/comments/223647846","html_url":"https://github.com/certbot/certbot/issues/2799#issuecomment-223647846","issue_url":"https://api.github.com/repos/certbot/certbot/issues/2799","id":223647846,"user":{"login":"eleumik","id":4514393,"avatar_url":"https://avatars.githubusercontent.com/u/4514393?v=3","gravatar_id":"","url":"https://api.github.com/users/eleumik","html_url":"https://github.com/eleumik","followers_url":"https://api.github.com/users/eleumik/followers","following_url":"https://api.github.com/users/eleumik/following{/other_user}","gists_url":"https://api.github.com/users/eleumik/gists{/gist_id}","starred_url":"https://api.github.com/users/eleumik/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/eleumik/subscriptions","organizations_url":"https://api.github.com/users/eleumik/orgs","repos_url":"https://api.github.com/users/eleumik/repos","events_url":"https://api.github.com/users/eleumik/events{/privacy}","received_events_url":"https://api.github.com/users/eleumik/received_events","type":"User","site_admin":false},"created_at":"2016-06-03T17:53:59Z","updated_at":"2016-06-03T17:53:59Z","body":"Meanwhile I didn't do any work on it, but I checked now and is still impossible to go to http with that firefox"}}
{"actor":{"display_login":"eleumik"}}