Traffic served Non Secure ~4%



we have SSL enabled, force SSL, page rules http > https
we even have rate limiting enabled for http traffic to block it

and we still get ~4% of traffic Non Secure

how can this be?



This chart shows the division between unencrypted and encrypted ‘HTTPS’ requests using TLS. Redirects from HTTP to HTTPS are counted as unencrypted requests. When a page rule or origin server redirect to HTTPS is used, a percentage of unencrypted traffic is normal

Note: In order to increase the amount of traffic served over HTTPS, you should redirect all visitors to HTTPS.