Redirect from libravatar.org to https://libravatar.org first

[François Marier]

As suggested in https://garron.net/crypto/hsts/hsts-2013.pdf, once bug 1355378 is fixed, we should change the top-level redirect to:

  http://libravatar.org -> https://libravatar.org -> https://www.libravatar.org

to ensure that the redirecting browser will pick up the HSTS settings for the bare domain before hitting the front page.

[François Marier (fmarier)]

This will require adding a new "base domain" debconf question.

[François Marier (fmarier)]

This is what I tested on production:

+<VirtualHost *:80>
+ ServerName libravatar.org
+ ServerAdmin <email address hidden>
+ Redirect permanent / https://libravatar.org/
+</VirtualHost>
+
+<VirtualHost *:443>
+ ServerName libravatar.org
+ ServerAdmin <email address hidden>
+ Header always add Strict-Transport-Security: "max-age=15768000"
+ Redirect permanent / https://www.libravatar.org/
+</VirtualHost>