Who can use this feature?
Underneath the report download buttons, you will find some diagnostic information which will help you decide whether you are ready to turn on Always SSL.
- Navigate to Modules > Site Tools > Site Properties
- Select the Mixed Content Report tab
- View Primary SSL Domain, Redirect Domains, and Unsafe Redirects
Primary SSL Domain
- When Always SSL is enabled, by default all http traffic to your site will be redirected to this domain.
- Accordingly, this domain must have a valid SSL binding. If not, you will see an error message and you will not be able to turn on Always SSL.
- This table will indicate the status of any redirects set up on your site.
- If your site has multiple domains (e.g. department header package), each of these domains will need a valid SSL binding. Otherwise, any http traffic to a domain without a valid binding will be redirected to the Primary SSL domain. Domains without SSL bindings will be highlighted in red. You may still choose to turn on Always SSL, but it's important to be aware that this effectively disables http traffic for any domain highlighted in red.
Unsafe Redirect Domains
- This section will only be visible if any problematic redirects are found. Because Always SSL forces a redirect from http://domain -> https://domain, any redirects with absolute destination URLs indicating http will result in an infinite redirect loop. If you see any redirects here, make sure they are changed to specify https before turning on Always SSL.