Skip to content
Methodology

HTTPS

ia.https · 5.1

Read MUST Recommendation

Why it matters

HTTPS is the baseline for secure communication. AI agents and crawlers refuse to interact with insecure sites, and browsers mark HTTP sites as unsafe.

How to fix it

Serve the site over HTTPS with a valid certificate and redirect HTTP to HTTPS.

  1. Install a valid TLS certificate, for example from Let's Encrypt.

  2. Redirect all HTTP requests to HTTPS with a 301.

    server {
  listen 80;
  return 301 https://$host$request_uri;
}

Verify

curl -sI https://{domain}/

Expected: A response without a TLS error

Run a new scan for this checkpoint:

isagentready results {domain} --checkpoint ia.https
Details Mapping, lifecycle and references
AR mapping
No AR practice
Evidence source
Let's Encrypt
Score role
Core
Introduced
2026-08-24
Methodology version
2026-10-22

Checkpoint data (JSON)