1. You're (or at least you might be) redirecting wrong

    I've been working on the Web for more than 20 years. I've probably put more than a thousand endpoints into production that redirect the browser (or HTTP client), and I recently found out that I was doing it wrong.

    I mean, I wasn't always wrong. We were all wrong for quite some time. And that's not really all our own fault. It took a while for clients to catch up. Then it took a while for us to catch up. But there's no time like the present to fix this.

    If you're using the HTTP 302 status to redirect clients, you're doing it wrong. Stop doing it wrong.