snag.page

Every check ยท HTTPS

HTTPS

transport/https

What it checks

Whether https:// answers, without a loop or a redirect somewhere unsafe.

Why it matters

Without HTTPS, everything sent to and from the site can be read and changed by anyone on the network.

How to fix it

  1. Get a certificate for the domain: Let's Encrypt issues them free, and most hosts can set one up for you.
  2. Serve the site on port 443 with it.
  3. Then redirect http:// to https://, and add HSTS.

Check a site for this and everything else: snag.page. More on https: Redirect to HTTPS No downgrade HSTS www and the bare domain Certificate renewal