I currently have an issue regarding the security of a website I made. The domain service I am using is Google Domains, and the hosting service I am using is Heroku. I am using the SSL from Heroku, so all of the security is handled by them.
However, even with everything set up, the http://www.example.com website still exists, even though the https://www.example.com exists as well. How do I get rid of the http website through heroku or google domain? I don't see a way in doing so unless I have to change the code directly.
CodePudding user response：
You can configure HTTP-HTTPS redirection. This will be configured on your domain provider management page. Since this is with Heroku, you can check this guide[1] on how to configure HTTP-HTTPS redirection for Heroku deployment.