3
In my company we are moving from http to https for as many sites as we can. In the end we redirect from http to https with a "301 Moved Permanently" (and set the HSTS header).
Now following question came up: What happens if we send a HTML newsletter with references to images via http (e.g. http://example.com/image.jpg) after we set up the redirect?
Do "common mail clients" like Thunderbird, Apple Mail, Outlook (2010, 2013, 2016) etc. understand the 301 redirect and load the images via https (the redirect for http://example.com/image.jpg goes to https://example.com/image.jpg)?
If not: What do they do instead?
1Many (most?) common mail clients do not display external images at all by default which makes the question if redirect or not futile is most cases. And if you include the image instead directly into the mail so that it gets displayed from the client then you don't need to care about redirects at all. – Steffen Ullrich – 2016-12-14T10:46:59.650
2You're right about the default. But then the question is: What happens if the user hits the button to load the images anyway? – HorstKevin – 2016-12-14T11:02:15.607
HSTS header is NOT going to work for old browser versions as well. HTTP rediect rule on the server can fix the issue for the time being. Or you need a different resource delivery site (which is ideal) cloud cdn is ideal – None – 2016-12-14T23:12:03.180