Serve the site over HTTPS on Netlify
Why it matters
Without HTTPS everything visitors send and receive, including passwords and form data, can be read or changed by anyone on the network path. Browsers also label plain http pages as not secure.
Staged change. Do this in stages and check each one before the next, so a mistake does not break your site or your mail.
The fix
- Open Domain management, HTTPS for the site and check the certificate status. Netlify provisions a Let's Encrypt certificate once the domain's DNS points at Netlify.
- If provisioning fails, fix the DNS records Netlify lists, make sure no CAA record excludes letsencrypt.org, and use Verify DNS configuration to retry.
Related
- Reported by the HTTP to HTTPS redirect check
- Stop redirecting HTTPS to HTTP
- Redirect HTTP to HTTPS
- Fix the broken HTTPS redirect chain
- Shorten the redirect chain
- Fix the HTTP redirect chain
- Redirect HTTP straight to HTTPS
- Answer HTTP with a redirect to HTTPS
- Redirect www and apex to one host
- Make the www or apex name work over HTTPS
Scan your domain to see whether this applies to you.