Bad TLS behavior without -n

[ProducerMatt]

I was using 5.0.18.4 with no --https, certificate or key specified. I found that trying to load the page (locally or remote) would hang indefinitely on a TLS handshake.

If I kill the server, my browser starts showing what it had successfully received, which was only the content of the / page with no assets loaded. The command line log confirms that only the / page was requested.

I was stuck on this until I remembered that "CSP" seen in the help page had something to do with TLS, so I tried passing -n. This let me load everything as intended.

I suppose Hoogle without -n tries to serve non-root pages over HTTPS, even if HTTPS mode isn't enabled.

Reproducing:

• Clone https://github.com/srid/haskell-template
• Run just docs
• Try to access the Hoogle instance without -n.

I am a total noob to Haskell so PEBKAC is always possible. :)