In Firefox you can enable "HTTPS Only Mode" which auto-redirects all requests to HTTPS and provides a warning that you need to click through before downgrading

In Firefox you can enable "HTTPS Only Mode" which auto-redirects all requests to HTTPS and provides a warning that you need to click through before downgrading to HTTP. It is quick interesting to see what is not HTTPS. One common one I have seen is tracking links in emails are often not HTTPS. I have even see password reset links wrapped in tracking links that redirect through HTTP. So these could be intercepted and used to reset your password before you do.