These days, many sites automatically redirect http
requests to https
.
This would seem like a good thing.
However, there are still some, most notably http://nginx.org/ and http://www.apache.org/, that do not redirect to https
.
These people write server software, so I guess they must know what they are doing. This makes me wonder:
Is there a compelling reason for these sites not to redirect to https
automatically?