Plain HTTP is not redirected to HTTPS.

HTTP_NO_HTTPS_REDIRECT · Severity: Warning

• WarningHTTP_NO_HTTPS_REDIRECT

  Plain HTTP is not redirected to HTTPS.

  http://<domain>/ ends on an http:// page instead of redirecting to https://. Visitors who type the name or follow an old link stay on an unencrypted connection that can be read and changed on the way.

  Recommendation: Answer every plain HTTP request with a permanent redirect (301 or 308) to the same path on https://.

Reported by

• Security headers check
• Site health check

Available through the API

• Security headers check API
• Site health check API

Related findings

• Info HTTP_UNAVAILABLE The site does not answer over plain HTTP.

All findings