About HTTPS Redirects
What is an HTTPS redirect?
An HTTPS redirect sends anyone arriving at the insecure version of a URL to the secure one automatically. Having a certificate is not enough on its own: without the redirect, both versions remain reachable and both can be indexed.
That matters because old links, bookmarks, printed materials and typed addresses all default to HTTP. Every one of those lands on a page that should no longer be served.
An HTTPS redirect checker catches the half-finished migration, which is far more common than a site with no certificate at all. The padlock appears, everything looks done, and the insecure copy quietly continues to exist.
Does this still matter in 2026?
Yes, and browsers have made it easier to miss. Most now try HTTPS first, so the problem is invisible during casual testing while remaining fully present for anything following an old link.
A site reachable at both addresses is effectively duplicated: the same content at two URLs, splitting links, rankings and any authority between them.
It also undermines the certificate you paid attention to installing. Security that can be bypassed by typing an address without the s is not really enforced.
How HTTPS redirects relate to AI search
Consolidating on one address means citations, links and authority accumulate in one place rather than being divided across two versions of the same page.
It also removes the risk of an insecure URL being the one referenced, which reflects poorly on the source and may be blocked outright by clients that refuse plain HTTP.
Redirect efficiency matters here too. Crawlers give up after a few hops, so an HTTP address that redirects to www, then to HTTPS, then to a trailing slash may never be followed to the end.
Redirect best practices
- Use a permanent 301 redirect, not a temporary 302.
- Redirect straight to the final HTTPS URL rather than through intermediate hops.
- Handle the www and non-www variants in the same rule set.
- Add HSTS once you are confident, so browsers skip the insecure request entirely.
- Update internal links to HTTPS rather than relying on the redirect to fix them.
- Check that the redirect applies to every path, not only the homepage.
What this tool checks
The tool requests the HTTP version of the site and reports whether it redirects to HTTPS.
It confirms that a redirect occurs rather than counting how many hops it takes to get there, so a pass tells you the insecure version is not being served, not that the route is efficient.
Where to go next
A redirect is one of several things that decide which URL is treated as canonical. Confirm the
SSL checker certificate covers every hostname, check the
canonical tag names the HTTPS version, and make sure your
XML sitemap lists secure URLs only.