HTTP to HTTPS redirect
What it can report
- ✗ high https does not work, the site is plain http How to fix it
- ✗ high the https homepage redirects to http:// How to fix it
- ✗ high http:// serves the site instead of redirecting (medium when it answers an error) How to fix it
- ✗ high the https redirect chain does not complete (a loop, a dead end), or https completes the handshake and serves nothing (caps the grade at D) How to fix it
- ! low a redirect chain (https, or http while https works) is still redirecting after 5 hops (no grade cap) How to fix it
- ! medium the http:// redirect chain does not complete while https works How to fix it
- ! low the first redirect from http:// stays on http:// How to fix it
- · info nothing answers on port 80 How to fix it
- ! low apex and www both serve the site, neither redirects to the other How to fix it
- ! medium the www/apex counterpart resolves but its https fails How to fix it
- · info the homepage ends on another registrable domain; the header checks grade that site informational, nothing to fix
How it counts
The score is computed by fixed rules from the checks that ran, and this check has a weight of 4 within Security. A check that errors or is skipped is shown as "could not check" and left out of the score, never counted as a pass. Fixes and the AI summary are written after scoring and never change it.
Related checks
Scan your own domain and see this check run.