HTTP version doesn’t redirect to HTTPS

High priorityTechnical

The http:// version of the page still loads instead of sending visitors to the secure version.

What triggers this issue

• A request to http:// + your host and path doesn’t get a redirect to https://.

Why it matters

If both versions load, people who type your address or follow old links stay on the insecure site, and search engines may index both as duplicates, splitting your ranking signals.

How to fix it

1. Add a permanent (301) redirect from http:// to https:// at your server or CDN.
2. Most CDNs have an “Always use HTTPS” switch.

server {
  listen 80;
  server_name example.com www.example.com;
  return 301 https://$host$request_uri;
}