Safari forcing HTTPS for some HTTP only sites - SOLVED

Question

Level 1

15 points

Safari forcing HTTPS for some HTTP only sites - SOLVED

If, in Safari, a http:// site is getting automatically redirected to https:// and you get an error it cannot open the page, it's due to HSTS. You cannot prevent that from happening with the regular Safari or by deleting the ~/Library/Cookies/HSTS.plist file. Just doesn't work.

EXCEPT if you download the Safari Technology Preview version where you can delete the HSTS Policy cookie for said site. And then it works! Your 'normal' Safari version will pick this up too, in case you don't want to continue using the preview version.

Was driving me crazy.

Note: Chrome and Firefox are not affected by this behavior.

Posted on Jan 23, 2019 1:11 AM

Reply

Answer 1

Best reply

Morungos

Level 1

8 points

May 3, 2019 8:15 AM in response to goudkamp74

This now seems to be in the regular Safari as of 10.14.4 at least. It was driving me crazy, as I'd managed to get this set for localhost. However, just selecting localhost and deleting all its cookies worked fine in the regular Safari (12.1)/

Reply

Answer 2

Feb 4, 2019 3:37 AM in response to goudkamp74

I can confirm that this worked. My issue was with localhost, because I had tried using an SSH tunnel to another web host that requested https.

Reply

Answer 3

Mar 18, 2019 12:30 AM in response to goudkamp74

Thanks for that solution - this is by far the most elegant way to get rid of that problem! :-)

Reply

Answer 4

Apr 8, 2019 1:59 AM in response to goudkamp74

I can also confirm that this works. Thanks!

Reply

Safari forcing HTTPS for some HTTP only sites - SOLVED

Similar questions