Re:HTTP Security Headers – A Complete Guide
by txcwpalpha on Thursday July 18, 2019 @04:09PM
(#20473478)
If you had reason to previously set up your site with HTTPS, you should never fallback to serving anything other than static assets (and even then, you better have a damn good reason) over HTTP from that same domain. Period.
Sorry, but sometimes security is absolute.