Check library
TLS & TransportTypical severity · High
HTTP to HTTPS redirect
Plain HTTP requests should be upgraded before content is served.
What Chalo checks
Chalo follows up to five redirect hops from HTTP and confirms the chain reaches HTTPS.
Passing signal
The HTTP endpoint redirects to an HTTPS URL within the supported redirect chain.
Failing signal
HTTP content is served directly, or the redirect chain never reaches HTTPS.
How to fix it
Configure a permanent redirect at the CDN, load balancer, or web server.
Example configuration
return 301 https://$host$request_uri;