# Replit — HTTPS by default

- Company: Replit (replit.com)
- Announced: 2021-02-26T05:00:00+00:00
- Category: capability-change
- Coverage: not counted
- Announcement: yes
- Group: announcements
- Source: https://replit.com/blog/https
- Record: https://forck.live/items/18042-https-by-default
- Subject: Replit Agent

Replit announced that all HTTP server repls on its platform are now HTTPS-first by default. The proxy redirects HTTP requests to HTTPS before they reach the app, and serves HTTP Strict Transport Security headers. Replit manages around half a million HTTPS certificates using ACME with Let's Encrypt, using HTTP-01 validation for custom domains and DNS-01 validation for wildcard certificates on the repl.co domain.

## Evidence

Verbatim from https://replit.com/blog/https:

> That's why we're excited to announce that Replit is now HTTPS-first, which brings additional privacy, integrity, and security benefits to servers hosted on our platform. This applies to every HTTP server repl on Replit.

---

Record: https://forck.live/items/18042-https-by-default
Catalogue: https://forck.live/llms.txt
Current issue: https://forck.live/feed.md