FALKEN'S MAZE / CHECKS / HTTP REDIRECTS TO HTTPS

HTTP redirects to HTTPS

What Joshua checks

Checks that plain HTTP requests are redirected to HTTPS, on the first hop.

Why it matters

Visitors who type the bare domain arrive over HTTP; without a redirect, everything they send can be read or changed in transit.

How to fix it

Redirect every http:// request to the same https:// address with a 301, in your web server, host or CDN settings.

In the Maze Score

Worth

10 points (half for a warning)

Severity

High

Runs on

Every scan, including the free report card

Related checks

• Certificate validityFree
• Certificate expiryFree
• Legacy TLS versionsFree
• HSTSFree
• Mixed contentFree
• Cipher suitesPro (Watchtower)