Redirect HTTPS straight to the other host's HTTPS page on Cloudflare

Why it matters

The HTTPS homepage of this host redirects visitors to the plain http page of its www or non-www twin, although the twin serves the site over https itself and visitors lose the encrypted connection on the way. Point the redirect at the twin's https address instead.

The fix

1. Open Rules, Overview and look at Redirect Rules and Page Rules for a rule on example.com whose target starts with http://. Change the target to the https:// address of the other host (www.example.com or example.com), keeping the path.
2. Under SSL/TLS, Edge Certificates, turn on Always Use HTTPS so that no rule or origin answer can send visitors back to http.
3. If the origin issues the redirect, fix it there with your server's or application's tab.

The examples use example.com. Replace it with your own domain.

Read the documentation ↗(opens in a new tab)

Related

• Reported by the HTTP to HTTPS redirect check
• Serve the site over HTTPS
• Stop redirecting HTTPS to HTTP
• Redirect HTTP to HTTPS
• Redirect HTTP to HTTPS instead of answering an error
• Check that browsers are redirected from HTTP to HTTPS
• Fix the broken HTTPS redirect chain
• Shorten the redirect chain
• Fix the HTTP redirect chain
• Redirect HTTP straight to HTTPS
• Answer HTTP with a redirect to HTTPS
• Redirect www and apex to one host
• Make the www or apex name work over HTTPS