Check library
TLS & TransportTypical severity · High

HTTP to HTTPS redirect

Plain HTTP requests should be upgraded before content is served.

What Chalo checks

Chalo follows up to five redirect hops from HTTP and confirms the chain reaches HTTPS.

Passing signal

The HTTP endpoint redirects to an HTTPS URL within the supported redirect chain.

Failing signal

HTTP content is served directly, or the redirect chain never reaches HTTPS.

How to fix it

Configure a permanent redirect at the CDN, load balancer, or web server.

Example configuration
return 301 https://$host$request_uri;