尽管我只设置了一个 HTTP express 应用程序，但使用 Glitch 自动提供的 HTTPS 是否安全？

Question

I have created a simple http express app and uploaded it on glitch.

The code is as follows:

var app = require('express')();
var express = require('express');
var http = require('http').createServer(app);

app.use(express.static('./views'));

http.listen(3000, () => {
  console.log('listening on 3000');
});

When I choose view app on a new window option in glitch, the url is "** https://some-server-name.glitch.me/**"

Though I have setup only HTTP protocol, I get HTTPS in url. Does this mean it is secure to use this website ?

Answer 1

HTTPS is typically terminated by a reverse proxy in front of your application server. You wouldn't want to have to care about handling HTTPS in node. If you can access the URL via HTTPS, then yes, that's secure up to the Glitch endpoint, which is the most important part of the route.

Answered by deceze in the comments section. Would have been better if he had answered it directly !