| Previous | Next |
| WININET_E_SEC_CERT_CN_INVALID | WININET_E_HTTPS_TO_HTTP_ON_REDIR |
WININET_E_HTTP_TO_HTTPS_ON_REDIR
WININET_E_HTTP_TO_HTTPS_ON_REDIR reports that a redirect is moving a request from HTTP to HTTPS. It is a security-boundary transition that WinINet can surface to the application or user interface instead of treating as an invisible ordinary redirect.
Why it can matter
The initial HTTP request may have been subject to different policy, proxy, zone, or authentication behavior from the final HTTPS request. A client that maintains its own redirect or security policy should record both URLs and validate the final target before sending sensitive data.
Handling guidance
- Check whether automatic redirects are appropriate for this operation.
- Confirm that the HTTPS hostname and certificate satisfy the application policy.
- Do not confuse an upgrade redirect with proof that the original HTTP endpoint was trustworthy.
Microsoft: InternetErrorDlg redirect handling · Microsoft: HttpOpenRequest flags
Looking for a different code? Search another status or error code.