X-RAY // WEB // REDIR

HTTPS REDIRECT
CHECK.

Request http://<domain> and check whether it redirects to HTTPS with a permanent code (301 or 308) and to the right host for HSTS preload.

Runs only this check. For all 33 checks at once, use the full Domain X-Ray. Public lookups only; nothing is stored on the server.

REDIR

HTTPS redirect

WAITING

Enter a domain above to run this check.

01 // WHAT THE CHECK VERIFIES

What the check verifies

Requests http://<domain> and checks whether it redirects to HTTPS, and with which code.

02 // WHY IT MATTERS

Why it matters

Whoever types just the domain arrives over HTTP. Without a redirect, the first page travels unencrypted.

03 // HOW TO READ THE RESULT

What each result means

OK: HTTP redirects to an HTTPS address. A temporary redirect (302 or 307) is flagged.
WARNING: HTTP answers 200 without redirecting, or redirects to another HTTP address.
INFO: Port 80 did not answer, so there is no HTTP to redirect.

ERROR and TIMEOUT mean the query did not finish (the source was down or slow), not a problem with the domain: run the check again.

04 // HOW TO FIX

How to fix

Redirect all HTTP to HTTPS with a 301. On Cloudflare, turn on Always Use HTTPS in SSL/TLS › Edge Certificates.

# nginx
server {
  listen 80;
  server_name example.com www.example.com;
  return 301 https://$host$request_uri;
}

# Apache (.htaccess)
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

Would rather have someone else do it? Bit Happens can fix this →

05 // CONTINUE

More checks in Website and HTTPS

Full Domain X-Ray: all 33 DNS, email, HTTPS, certificate and reputation checks at once →