Shorten the redirect chain on Apache
Why it matters
The page is reached only after more redirects than our scanner follows (5), and each hop adds a round trip for visitors and crawlers. Usually http, www, a trailing slash and a language prefix are each redirected in a separate step; send the first request straight to the final address.
The fix
- Point every Redirect and RewriteRule at the final https address directly instead of at an address that redirects again, then reload Apache.
apache
<VirtualHost *:80> ServerName example.com Redirect permanent / https://example.com/ </VirtualHost>
The examples use example.com. Replace it with your own domain.
Related
- Reported by the HTTP to HTTPS redirect check
- Serve the site over HTTPS
- Stop redirecting HTTPS to HTTP
- Redirect HTTP to HTTPS
- Fix the broken HTTPS redirect chain
- Fix the HTTP redirect chain
- Redirect HTTP straight to HTTPS
- Answer HTTP with a redirect to HTTPS
- Redirect www and apex to one host
- Make the www or apex name work over HTTPS
Scan your domain to see whether this applies to you.