Checks

HTTP redirects to HTTPS

The HTTP endpoint answered 301 or 308 with a Location that starts with https://.

Why it matters

A permanent redirect is what browsers and caches remember, so later visits can skip plaintext HTTP.

What to do

No change is required for this redirect.

Reference

HTTPS availability and redirect behavior are baseline transport security controls.

OWASP Transport Layer Security Cheat Sheet