SSL & Security // updated 2026-07-22

Force HTTPS site-wide

Redirect all HTTP traffic to HTTPS and enable HSTS.

RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"

warn
Only enable HSTS preload after you’re 100% sure every subdomain works over HTTPS — it’s cached by browsers for a year.

Still stuck? Our engineers answer the phone 24/7 — (480) 624-2500.