Infrastructure

Oops wasn't aware of this ticket. https://tdf.io is available since mid January, and distributing to https://tdf.io/$shortlink should be preferred over their http:// counterpart. They both 301-redirect to the location set in the YOURLS database. OTOH http://tdf.io/admin 301-redirects to its https:// counterpart in order to protect logins.

Moreover since about 2-3 weeks YOURLS uses SAML 2.0 for authentication: unauthenticated users are redirected to the central auth portal, and then back to https://tdf.io/admin after authentication.