> The point of https here is to serve as a guarantee that the content you see is the content that was provided by the server and not something that was injected

> The point of https here is to serve as a guarantee that the content you see is the content that was provided by the server and not something that was injected by somewhere between the two ends of the wire. As I highlighted above, a redirect from http to https is going exactly against this. If you care about MITM attacks for your visitors to that extent, you should not serve any traffic on HTTP. Yet that's a usability nightmare because of how web clients (not just browsers) operate today.