What it is
A valid certificate and a permanent redirect from http://. Nothing exotic.
Why an agent cares
Many HTTP clients and browsers warn on or refuse insecure origins, and anything that checks transport security marks the page down.
A mixed-content page can also lose exactly the parts you most want read.
How to fix it
- Terminate TLS at your CDN or origin.
- 301 all http:// traffic.
- Send HSTS once you're confident nothing depends on plain HTTP.
How we test it
We check the final URL after following every redirect hop.