You should only ever have a single canonical version of your content. Serve your stuff on one path and one path only, and everything else redirects to it.

The solution here is to serve on https and redirect http to it.