text: Title: http://update6.dedyn.$DOMAIN broken
  Body: This bug is invisible if you have received HSTS headers on update6.dedyn.$DOMAIN. However, it's visible using curl:
  
      $ curl http://update6.dedyn.io
      curl: (52) Empty reply from server
      $ curl https://update6.dedyn.io
      No username URL parameter provided.
  
  The expected behavior would be a redirect on https.
  