check http -> https redirect

[tykling]

ssllabs doesn't check if there is a http -> https redirect, so tlsscout should check that.

[rlindsgaard]

Is the naive approach the right one, or can you do something cool?

What I'm thinking is following every redirect, checking whether all of them are https redirects.

[rlindsgaard]

Something like this might work

class SiteCheckError(Exception):
    pass


def check_no_http(url):
    resp = requests.get(url)
    resp.raise_for_status()

    responses = resp.get('history', ()) + (resp,)
    parsedresults = [urlparse.urlparse(h.url) for h in responses]

    for pr in parsedresults:
        if not 'https' == pr.scheme:
            raise SiteCheckError('Non-https scheme found in lookup history')