New answers tagged best-practices
Well, 404 should be used when the resource do not exist, is not that you're not authorized, it is not there at all. 403 should be for forbidden resources, regardless you're authenticated, you might not have permission over a given resource. I rather 401 for resources that are found but requires some sort of authentication to get it. IMO
Personally I think this is justified. By returning a 403 instead, Github would be confirming that a repository with that name exists, which in itself could be seen as a security hole (or at least undesirable). As a contrived example, imagine that these repositories existed: http://github.com/valve/HalfLife http://github.com/valve/HalfLife2 If one day ...
If I were you, I would certainly take both domains, you wouldn't want someone else to use elniño.com when you have a site called elnino.com. Point both to the same webspace, but choose one as the cannonical one. It can be either, but personally I would go for the one without accents, because it's sure to work from anywhere and avoids compatibility or ...
Top 50 recent answers are included