Redirecting a webpage from HTTP to HTTPS is safe and how to identify whether the webpage is safe or…

This behaviour is likely not a bug but rather a website implementing security best practices. Here’s why:

HTTP to HTTPS redirect: This is a desired behaviour. Websites are increasingly moving to HTTPS (Hypertext Transfer Protocol Secure) for secure communication. HTTPS encrypts data transfer, protecting your information from eavesdropping. So, a website redirecting from HTTP to HTTPS on the password reset link is actually a good security measure.Copied links might not include the entire URL: When you copy and paste a link, it might only capture the main part (e.g., domain name and path) and not the entire URL, including the protocol (HTTP or HTTPS).Server-side redirect: When you paste the link into a new tab and press enter, the website’s server likely interprets it and automatically redirects you to the secure HTTPS version, even if the pasted link was missing the “HTTPS” part.

Therefore, seeing this behaviour is generally not a bug. It’s the website ensuring a secure connection for password reset, even if the copied link itself lacked the protocol information.

However, here are some things to keep an eye on:

Look for the padlock symbol: In the address bar of your browser, make sure you see a padlock symbol when entering your password. This confirms a secure HTTPS connection.The website padlock symbol in the URL Box

The data being sent between the web server and the user’s computer is encrypted and cannot be read by others.

Double-check the URL: Before entering any sensitive information, ensure the website address matches the legitimate website you’re trying to access. Phishing scams might try to trick you into entering information on a fake website with a similar address.

If you’re still concerned about the website’s behaviour, you can try requesting a new password reset link directly from the website instead of relying on the copied link.