quick question about the management of https for the 2 versions of a domain

Hello to all.
I have a domain hosted by ovh for example.
domain.com >> type A >> ip.server (ispConfig)
www.domain.com >> type A >> ip.server (ispConfig)

In isp, I check SSL / LEncrypt for the domain = OK

But if I type in a browser "domain.com" without specifying 'http//" or "https//" the version without https loads telling me that the site is not secure.

However, if I look in the VHOST, there is the "www" version in the alias.

I must be doing it wrong somewhere...

 

I thought all browsers nowadays use httpS if it is available?
You write about http and https, and then writing www in domain name, they are separate things. You should include www in the https certificate, then that name is also certified. Then in the website settings Redirect tab choose "Rewrite HTTP to HTTPS". With those setups things should start working. If not, then I have not undertood what you were asking and you should word you quetion differently.

 

Yes, you right, you understand perfectly, it's on www and non www version. Thanks, I'm checking

 

it works perfectly, thanks @Taleman

 

Hi @Jesse Norell I think ispConfig done it for hsts.

have you a link to explain ? Thanks

 

Using Internet Search Engines with

Code:

HSTS useful security headers

finds useful articles.

 

o…k…