Redirect HTTP to HTTPS on Cloudflare
Why it matters
Visitors who type the bare domain or follow an old link land on the unencrypted site and stay there. A permanent redirect sends every http request to the same page over https.
Staged change. Do this in stages and check each one before the next, so a mistake does not break your site or your mail.
The fix
- Stage 1: open https://example.com/ and the important pages and fix any warnings. Set SSL/TLS, Overview to Full (strict) if the origin has a certificate.
- Stage 2: open SSL/TLS, Edge Certificates and turn on Always Use HTTPS. It redirects every http request on proxied hosts to https.
- If the encryption mode is Flexible, remove any http to https redirect on the origin; together with Flexible it causes a redirect loop.
The examples use example.com. Replace it with your own domain.
Related
- Reported by the HTTP to HTTPS redirect check
- Serve the site over HTTPS
- Stop redirecting HTTPS to HTTP
- Fix the broken HTTPS redirect chain
- Shorten the redirect chain
- Fix the HTTP redirect chain
- Redirect HTTP straight to HTTPS
- Answer HTTP with a redirect to HTTPS
- Redirect www and apex to one host
- Make the www or apex name work over HTTPS
Scan your domain to see whether this applies to you.