Blog Security

HTTPS destinations are the floor

Every plan requires a public https destination before a short code is issued.

People on phones are right to hesitate at a plain http address. no-referer asks for https before it issues a short code - on Free, Pro, Bulk, and Enterprise alike.

The check happens at create time. A link that cannot be saved never reaches a chat thread or a printed note.

The destination is checked before a short code exists.
The destination is checked before a short code exists.

A URL that will save

  • Starts with https://
  • Resolves on a public host - not a raw IP or odd scheme
  • Does not point back at no-referer.com
  • Loads in a private window before you shorten it for others

If create fails, read the error, fix the URL, and try again. Questions: [email protected].