HTTP Does Not Redirect to HTTPS: How to Force HTTPS

Http no redirect

HTTP Does Not Redirect to HTTPS: How to Force HTTPS

Your http pages load without forcing https. Add one 301 redirect that sends every http request…
Learn More
Https form posts to http

HTTPS Form Posts to HTTP: How to Fix the Insecure Form

A form on an HTTPS page that posts to an HTTP endpoint sends user data over…
Learn More
Diagram showing an insecure http url 301 redirecting to its https equivalent, with apache and nginx redirect rules and an hsts response header.

Internal HTTP URLs

Best practices guide for Internal HTTP URLs (SE-013). Priority: High. Batch check required.
Learn More
Mixed content

Mixed Content: How to Find and Fix HTTP Resources on HTTPS

Mixed content happens when an HTTPS page pulls in resources over plain HTTP. Browsers block the…
Learn More
Password on http

Password on HTTP

Best practices guide for Password on HTTP (SE-014). Priority: Critical. Batch check required.
Learn More
Http url contains password input

Password Input on an HTTP Page: How to Fix This Now

A password field on a plain HTTP page means login details can be read off the…
Learn More

Get new blog posts by email: