You seem to use Github Pages ([it supports HTTPS nowadays](https://blog.github.com/2018-05-01-github-pages-custom-domains-https/)) and Cloudflare, so you should force HTTPS with Cloudflare or Github Pages. Cloudflare **Crypto** section: 