{"action":"opened","issue":{"url":"https://api.github.com/repos/EFForg/https-everywhere/issues/7313","repository_url":"https://api.github.com/repos/EFForg/https-everywhere","labels_url":"https://api.github.com/repos/EFForg/https-everywhere/issues/7313/labels{/name}","comments_url":"https://api.github.com/repos/EFForg/https-everywhere/issues/7313/comments","events_url":"https://api.github.com/repos/EFForg/https-everywhere/issues/7313/events","html_url":"https://github.com/EFForg/https-everywhere/issues/7313","id":182180080,"number":7313,"title":"dreamhost.com and the possibility of new subdomains over time","user":{"login":"galenide","id":1100804,"avatar_url":"https://avatars.githubusercontent.com/u/1100804?v=3","gravatar_id":"","url":"https://api.github.com/users/galenide","html_url":"https://github.com/galenide","followers_url":"https://api.github.com/users/galenide/followers","following_url":"https://api.github.com/users/galenide/following{/other_user}","gists_url":"https://api.github.com/users/galenide/gists{/gist_id}","starred_url":"https://api.github.com/users/galenide/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/galenide/subscriptions","organizations_url":"https://api.github.com/users/galenide/orgs","repos_url":"https://api.github.com/users/galenide/repos","events_url":"https://api.github.com/users/galenide/events{/privacy}","received_events_url":"https://api.github.com/users/galenide/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-10-11T05:56:35Z","updated_at":"2016-10-11T05:56:35Z","closed_at":null,"body":"With the dreamhost.com domain, it appears that there are a number of subdomains under which third party sites are hosted, such as http://mug.dreamhost.com/, http://www.otismaxwell.dreamhost.com/, http://ovaltine.dreamhost.com/, http://crookedtimber1.dreamhost.com/, and http://apache2-xenon.shasta.dreamhost.com/. In addition, it appears that these subdomains for third party sites do not necessarily support HTTPS. As of this writing, the DreamHost ruleset has a wildcard rule for redirecting all subdomains by default to HTTPS, along with an exclusion list for subdomains that do not support HTTPS. From what it would seem, if it is possible over time for subdomains to be added under dreamhost.com for the hosting of third party sites, and with the subdomains not supporting HTTPS, then it may well be more useful for the DreamHost ruleset to have an explicit list of domains that should be redirected to HTTPS, and to only redirect domains on the list."}}
{"actor":{"display_login":"galenide"}}