Security audit

HTTPS enforcement

6 checks · 2 findings · scope: domain, site

Audit id: security.https_enforcement.

Checks

Insecure address does not redirect to HTTPS http_not_redirected
Browsers are not told to always use HTTPS hsts_missing
HTTPS-only instruction expires too quickly hsts_too_short
HTTPS-only instruction skips subdomains hsts_without_subdomains
Page only works without HTTPS page_available_over_http_only
Internal links point to insecure pages internal_links_to_http

Findings