# HELP how do I see what protocol I'm using?

**URL:** https://community.letsencrypt.org/t/help-how-do-i-see-what-protocol-im-using/150491
**Category:** Help
**Created:** [April 26, 2021, 5:45pm UTC](https://community.letsencrypt.org/t/help-how-do-i-see-what-protocol-im-using/150491 "2021-04-26T17:45:44Z")
**Posts on this page:** 1
**Showing post:** 17

<div class="post-metadata">

### Author: ![griffin](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/griffin/32/50204_2.png) [@griffin](https://community.letsencrypt.org/u/griffin)
#### Post date: [April 27, 2021, 6:00pm UTC](https://community.letsencrypt.org/t/help-how-do-i-see-what-protocol-im-using/150491/17 "2021-04-27T18:00:12Z")

</div>

> [@tedm](#):
>
> my web browser it's going to start with a http: query not an https: query.

[HSTS preload](https://en.m.wikipedia.org/wiki/HTTP_Strict_Transport_Security)

> [@tedm](#):
>
> What good is an SSL cert on [somedomain.com](http://somedomain.com) since a MiM attack can intercept the initial http:// query and issue a redirect to somewhere else?

If the destination isn't https with a matching certificate for the host name, any modern browser will recognize this. I wouldn't proceed. Would you?

> [@tedm](#):
>
> no attacker is going to waste time with a MiM attack

This isn't 1990. Destroying reputations online is big business.

> [@tedm](#):
>
> As for securing your server well that has nothing to do with whether or not you are running SSL and everything to do with whether or not you are running current versions of apache/ngx/whatever. Don't conflate the two. Putting a cert on old server code does NOT secure your server.

Agreed. Still not a reason to walk outside without clothes.

* * *

As for the rest, while I agree with much of what you say, to me it's a bit like arguing against dog leashes because they don't prevent forest fires.

---

_[View the full topic](https://community.letsencrypt.org/t/help-how-do-i-see-what-protocol-im-using/150491)._