Hacker News Reader

Steam is not using self-signed certs. store.steampowered.com is their main user-facing storefont.

Why would they "most likely" be using a self-signed cert? That would be an extreme edge-case in my mind, not the standard.

View on HN

I meant most likely as in a as to why they do the http to https redirect. I have seen this from several other apps, I don't think its extreme, but my guess is just based on the redirect seeming to be intentional. I should probably have said "this could possibly be because", rather than "most likely".

Reply on news.ycombinator.com