Readiness check · Harden lane · weight 10
HTTP requests move to HTTPS
A request to http:// on the main host answers with a redirect to an https:// address.
- Observed on
- 91%
- Top 1K sites
- 89%
- Top 1M band
- 92%
- Not measured
- 9,015
of 31,080 measured sites
394 measured
4,704 measured
blocked, challenged or not applicable
Why it matters
Visitors who type the address or follow an old link start on unencrypted HTTP. A redirect moves them to the encrypted site before any cookies or form data are sent.
How to fix it
Add a permanent (301 or 308) redirect from every http:// URL to the same https:// URL at your CDN, load balancer or web server.
How we check
A request to http:// on the main host answers with a redirect to an https:// address.
Observed: Plain HTTP redirected to HTTPS.
Not observed: Plain HTTP did not redirect to HTTPS.
Limit: Measured for the homepage only, from one location, at the time of the check.
Stack-specific steps
- Cloudflare: Turn on Always Use HTTPS under SSL/TLS > Edge Certificates.
- Amazon CloudFront: Set the viewer protocol policy of each cache behaviour to Redirect HTTP to HTTPS.
- WordPress: Set both WordPress Address and Site Address to https:// in Settings > General, then add the server or CDN redirect.
- Shopify: Shopify provisions certificates for connected domains; confirm the domain shows SSL as active in Settings > Domains.
By popularity band
| Chrome UX Report band | Observed | Measured |
|---|---|---|
| Top 1K | 89% | 394 |
| Top 5K | 89% | 1,451 |
| Top 10K | 90% | 1,889 |
| Top 50K | 90% | 14,240 |
| Top 100K | 92% | 4,106 |
| Top 500K | 91% | 4,296 |
| Top 1M | 92% | 4,704 |
Categories most likely to do this
Categories least likely
By stack
- PrestaShop100%
- Shopify>99%
- Next.js on Amazon CloudFront>99%
- WordPress on Amazon CloudFront99%
- Next.js on Vercel99%
- Magento / Adobe Commerce98%
- Adobe Experience Manager on Amazon CloudFront98%
- Webflow97%
- Sitecore97%
- Blogger97%
- Drupal on Cloudflare97%
- Nuxt on Amazon CloudFront96%
- Next.js on Fastly96%
- Drupal96%
- Angular96%
- Adobe Experience Manager96%
- Astro95%
- Next.js95%
- Nuxt94%
- WordPress on Cloudflare94%
- WordPress94%
- Nuxt on Cloudflare92%
- Next.js on Cloudflare92%
- Next.js on Google edge90%
- Next.js on Akamai90%
By provider
- Vercel>99%
- Amazon CloudFront96%
- Google edge94%
- Imperva92%
- Cloudflare91%
- Fastly90%
- Azure Front Door/CDN85%
- Akamai83%
Popular sites where we observed this
Sources and guides
Guide: HTTPS and TLS Guide for Website OwnersCheck your own site