Operator-facing explanation for each rejection reason.
Every message states the actual rule rather than a simplification of it —
in particular both scheme messages name the loopback carve-out, because
"must use https" would contradict a policy that does accept http:// on
loopback and send someone hunting for a certificate they do not need.
Operator-facing explanation for each rejection reason.
Every message states the actual rule rather than a simplification of it — in particular both scheme messages name the loopback carve-out, because "must use https" would contradict a policy that does accept
http://on loopback and send someone hunting for a certificate they do not need.