[GitHub] [apisix-website] Miss-you opened a new issue #74: Apache APISIX's official webpage is at risk of hijacking

[GitBox]

Miss-you opened a new issue #74:
URL: https://github.com/apache/apisix-website/issues/74


   Apache APISIX's official webpage is at risk of hijacking
   
   Phenomena.
   1. search the Apache APISIX website through Baidu or Google, the default is 
to use the http protocol to access.
   
![image](https://user-images.githubusercontent.com/3816205/93440497-0fe2e400-f902-11ea-9563-506791b8d8d3.png)
   
   Solution.
   1. if it's an http request, reply to the 302 bounce response to jump to the 
https page
   2. add response header for all http responses: `Strict-Transport-Security: 
max-age=172800` to ensure that subsequent users accessing the apisix website 
will use the https protocol by default.


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org