0

I deployed an app on Heroku and set up automatic SSL configuration. According to my Heroku, my app can be accessed via https. If I use that URL, the connection is indeed secure.

enter image description here

I added a Synthetic Recored in my google domain to point to this url. I also added a Custom Resource Record where the Name is www, Type is CNAME, and Data is my DNS Target for the app.

enter image description here

I can only connect securely when I use https://www.osrshub.com. If I use www.osrshub.com or osrshub.com, it is not secure. What am I doing wrong?

atye
  • 89
  • 1
  • 9
  • DNS doesn’t / can’t change protocols (HTTPS != HTTP). Have the web server request (mandate) a TLS upgrade connection, however that is done for the particular HTTP server (or forward facing proxies/netscalers): this will instruct the BROWSER to reconnect using HTTPS. – user2864740 Sep 23 '19 at 02:06

1 Answers1

0

The comment from user2864740 is correct. I needed to update my front end to redirect to https.

Force SSL/HTTPS with mod_rewrite

atye
  • 89
  • 1
  • 9