{"action":"opened","issue":{"url":"https://api.github.com/repos/cockroachdb/cockroach/issues/5180","repository_url":"https://api.github.com/repos/cockroachdb/cockroach","labels_url":"https://api.github.com/repos/cockroachdb/cockroach/issues/5180/labels{/name}","comments_url":"https://api.github.com/repos/cockroachdb/cockroach/issues/5180/comments","events_url":"https://api.github.com/repos/cockroachdb/cockroach/issues/5180/events","html_url":"https://github.com/cockroachdb/cockroach/issues/5180","id":140316321,"number":5180,"title":"ui: Poor user experience when pointing a web browser to CockroachDB without SSL","user":{"login":"knz","id":642886,"avatar_url":"https://avatars.githubusercontent.com/u/642886?v=3","gravatar_id":"","url":"https://api.github.com/users/knz","html_url":"https://github.com/knz","followers_url":"https://api.github.com/users/knz/followers","following_url":"https://api.github.com/users/knz/following{/other_user}","gists_url":"https://api.github.com/users/knz/gists{/gist_id}","starred_url":"https://api.github.com/users/knz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/knz/subscriptions","organizations_url":"https://api.github.com/users/knz/orgs","repos_url":"https://api.github.com/users/knz/repos","events_url":"https://api.github.com/users/knz/events{/privacy}","received_events_url":"https://api.github.com/users/knz/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2016-03-11T23:18:20Z","updated_at":"2016-03-11T23:18:20Z","closed_at":null,"body":"Steps to reproduce:\r\n\r\n1. start CockroachDB\r\n2. enter `http://hostname:26257` in web browser.\r\n3. observe: the browser displays something like `���\u0004�������\u0004\b������\u000Eÿñ`  as black text on a white background (no error, no suggestion as to what went wrong)\r\n\r\nMeanwhile in the server log:\r\n```\r\nI160311 23:14:16.884236 http2_server.go:227  transport: http2Server.HandleStreams received bogus greeting from client: \"GET / HTTP/1.1\\r\\nHost: lo\"\r\n```\r\n\r\nWhat needs to happen here: any insecure HTTP 1.1 request without SSL should get a 4xx response so that the browser at least has something intelligent to say to the user, or better yet a 301 redirect if it knows the URL and can propose the same with `https://` in front."}}