We're validating that we're not following a redirect from https to http. https://github.com/dotnet/runtime/blob/5ebfca2bb9b9c33e4a6e4db0ed2d11591f70d2b6/src/libraries/System.Net.Http/src/System/Net/Http/SocketsHttpHandler/RedirectHandler.cs#L133-L134 We should also check that the new request url scheme is valid at all, as we do before sending the initial request https://github.com/dotnet/runtime/blob/5ebfca2bb9b9c33e4a6e4db0ed2d11591f70d2b6/src/libraries/System.Net.Http/src/System/Net/Http/SocketsHttpHandler/SocketsHttpHandler.cs#L680-L683