Google’s John Mueller said this morning on Reddit that even if you have HSTS (HTTP Strict Transport Security) which kind of by default forces a domain to go from HTTP to HTTPS, that you should still set up the 301 redirects from HTTP to HTTPS as well.

John said “Yes, always redirect if you can.” He added:

So when migrating to HTTPS, first do redirects and then after a few months or so when everything is set you can set up HSTS, but no need to remove the redirects you set in place already.

Back in 2015, we reported that Google treats HSTS as a redirect of some sorts. But Google has warned folks about taking it slow with HSTS configurations in the past.

Hat tip to:

Forum discussion at Reddit.