Fix this week

The plain, unlocked version of your site still works

This is the exact wording EverThread uses when it finds this on a customer's site, written for someone who runs a business, not a server. The example site here is yourbakery.com.

What we saw

Typing yourbakery.com without https loads an insecure page instead of switching to the secure one.

Why it matters

Visitors who arrive that way have no padlock, and anything they type can be read on the way.

How to fix it

Ask your developer or host to redirect all plain http traffic to https. It is a standard one-line setting.

For your developer