Google: You Should Redirect HTTP Even With HSTS Configured

Jul 19, 2018 - 7:36 am 4 by

Green Tech Google 1900px

Google's John Mueller said this morning on Reddit that even if you have HSTS (HTTP Strict Transport Security) which kind of by default forces a domain to go from HTTP to HTTPS, that you should still set up the 301 redirects from HTTP to HTTPS as well.

John said "Yes, always redirect if you can." He added:

HSTS is great to add on top of redirecting & HTTPS, but I'd recommend not doing that if you're just moving the site over for the first time. It's hard to roll back & fix issues, and you really need time to make sure that you have everything set up properly first. Take your time to get HTTPS right first, then think about the implications of HSTS.

So when migrating to HTTPS, first do redirects and then after a few months or so when everything is set you can set up HSTS, but no need to remove the redirects you set in place already.

Back in 2015, we reported that Google treats HSTS as a redirect of some sorts. But Google has warned folks about taking it slow with HSTS configurations in the past.

Hat tip to:

Forum discussion at Reddit.


Popular Categories

The Pulse of the search community


Search Video Recaps

Video Details More Videos Subscribe to Videos

Most Recent Articles

Search Forum Recap

Daily Search Forum Recap: May 28, 2024

May 28, 2024 - 10:00 am
Google Updates

Memorial Day Google Search Ranking Volatility

May 28, 2024 - 7:51 am
Google Search Engine Optimization

Google's John Mueller On Recovering From Core Updates - Maybe You Had A Good Run...

May 28, 2024 - 7:41 am
Google Ads

Undated Google Ads Experiments To End August 23, 2024

May 28, 2024 - 7:31 am

Google Tests Thin Top Deals Search Bar

May 28, 2024 - 7:21 am
Google Search Engine Optimization

Report: 14,000+ Google Search Ranking Features Leaked

May 28, 2024 - 6:15 am
Previous Story: Google Tests New Location Tab & Scores For Hotel Listings