Every check ยท HTTPS
No downgrade
What it checks
Whether any redirect goes from https:// back to http://.
Why it matters
A downgrade throws away the encryption a visitor started with.
How to fix it
- Find the redirect that sends https:// to http://, in the server or in your CMS's site address setting.
- Change it to keep https://.
Check a site for this and everything else: snag.page. More on https: HTTPS Redirect to HTTPS HSTS www and the bare domain Certificate renewal