[dopidopHN]

I meant actually solve it by upgrading to HTTPS in a reverse proxy but yeah :)

[jiggawatts]

They're already behind Akamai, and have a valid certificate and the site is reachable on HTTPS... but redirects back to HTTP.

That's purposeful incompetence, not an accident, oversight, lack of budget, or anything else that can be excused.