Can't Find the Issues with a Site about pulse

[konklone]

@jwilkinsusaid I think the reason is that the immediate redirect is to an http:// URL:

$ curl --head https://accqpub.usaid.gov
HTTP/1.1 302 Moved Temporarily
Server: Day-Servlet-Engine/4.1.24 
Date: Thu, 19 Apr 2018 21:29:19 GMT
Location: http://accqpub.usaid.gov/index.html
Strict-Transport-Security: max-age=31536000; includeSubDomains

SSL Labs doesn't care about redirect downgrades, to my knowledge (and even if it did, it might take the HSTS policy that was set during the original response and apply it to the redirect).

However, Pulse does care about this, and it dings HTTPS sites that do a redirect "down" to http:// before redirecting back "up" to https://. If you fix the redirect destination to use https://, it should fix your standing in Pulse.

[jwilkinsusaid]

@konklone Very helpful, thanks!