automatic redirect of port 80 to 443 (external sites) not compatible with "tight" routing

[sarnold]

First off, best practices say do not do automatic redirects like that on your web site. Second, fpnd network links are purposely "tight" so we do not take over the default route on a user host. Instead, we route only a few protocols (ie, http/https and dns/dot) between specific ports, which does not take into account working around upstream sites doing such redirects. This does not affect https requests, only http requests to a site doing automatic redirects of 80=>443. Using http with a site that only offers http should still work (and is still horribly insecure).