Full threadmtmail·Use http => https redirects and https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security headers to make sure browsers always go to the https version.View on HN