Does not redirect HTTP traffic to HTTPS

All sites should be protected with HTTPS. Learn why and how to set up HTTPS on your server.

How the Lighthouse HTTP redirection audit fails

Lighthouse flags pages that aren't redirected to HTTPS:

Lighthouse changes the page's URL to HTTP, loads the page, then waits for the Chrome Remote Debugging Protocol event that indicates that the page is secure. If Lighthouse doesn't receive the event within 10 seconds, the audit fails.

How to redirect HTTP traffic to HTTPS

Once you've set up HTTPS, make sure that all unsecure HTTP traffic to your site is redirected to HTTPS:

• Use canonical links in the head of your HTML document to help search engines figure out the best way to get to the page.
• Configure your server to redirect HTTP traffic to HTTPS:
  • nginx
  • Apache
  • Cloudflare
  • Microsoft IIS

Resources

• Source code for the Does not redirect HTTP traffic to HTTPS audit
• Best practices to address:
  • Does not use HTTPS
  • Document does not have a valid rel=canonical