Title: Not forcing external URLs to use https Last modified: July 16, 2018 --- # Not forcing external URLs to use https * Resolved [geoffm](https://wordpress.org/support/users/geoffm/) * (@geoffm) * [7 years, 9 months ago](https://wordpress.org/support/topic/not-forcing-external-urls-to-use-https/) * I’m aware that this has been raised before, but I’m not clear if there is a fix available. I want to use this plugin, which seems great to me. I have it running a test site at the moment. The issue is that I want to apply redirection on the entire site (which is pretty big) and will need to enable ‘Force resources to use HTTPS URL’, because there are lots of links in there. But I don’t want to force the use on external URLs, which on some pages we link to, and which are essential. Is there a way to exclude external URLs from being changed to https? Viewing 5 replies - 1 through 5 (of 5 total) * Plugin Support [mbrsolution](https://wordpress.org/support/users/mbrsolution/) * (@mbrsolution) * [7 years, 9 months ago](https://wordpress.org/support/topic/not-forcing-external-urls-to-use-https/#post-10499240) * Hi, from what I read above your situation is a bit tricky. Unfortunately there is no option in the plugin to exclude certain links from changing if you enable the following feature **Force resources to use HTTPS URL**. * Kind regards * Plugin Author [mra13](https://wordpress.org/support/users/mra13/) * (@mra13) * [7 years, 9 months ago](https://wordpress.org/support/topic/not-forcing-external-urls-to-use-https/#post-10500299) * Hi, Let me explain something on the external URLs. Some people get a little confused on this so maybe this explanation will be of some help. * The external links (outgoing links) are not touched by our plugin. It only forces the URLs (static resources) that are used in an EMBED in your webpage. So lets say for example, you have embedded any image in your blog post. This image is coming from an external source. If that image URL is not using HTTPS then your full post is going to show the SSL warning (meaning its no longer a secure page). * The way SSL works is that you can’t embed anything using non-https URLs if you want the page to be fully SSL secured. So things like images, JS files, CSS files etc that are embedded in your site must be in HTTPS. there is no other way. * However, if you have a simple outgoing link to another site (for example a link to a reference page, an amazon product page etc.) and that link is non-https, that is totally fine. That link has no bearing in your page being SSL secured. So our plugin won’t touch that. * Thread Starter [geoffm](https://wordpress.org/support/users/geoffm/) * (@geoffm) * [7 years, 9 months ago](https://wordpress.org/support/topic/not-forcing-external-urls-to-use-https/#post-10500536) * Hi, thanks for that explanation (and the very prompt feedback). But still, it would be easier if you could exclude certain pages, rather than having to include them. The site I am referring to is a gliding club. One of our pages embeds images from web cams, from a non-secure source. The plugin forces those images to https, which means they don’t work. Now, I don’t really care if that page isn’t secure. The problem is there’s a 100 or so pages on that site. So the only way I can make those images display is – I think – by not including them in the https redirection. But that means selectively choosing 99 pages to be re-directed, rather than choosing just one not to be redirected. That’s my issue. * Plugin Support [Alexander C.](https://wordpress.org/support/users/alexanderfoxc/) * (@alexanderfoxc) * [7 years, 9 months ago](https://wordpress.org/support/topic/not-forcing-external-urls-to-use-https/#post-10500681) * Hi. * The idea of the plugin is to make your site secure. Having links to non-HTTPS images makes the page insecure, which makes the whole plugin kinda useless. * We have plans to add domains exclusion list for “Force HTTPS” option. E.g. you would be able to add “example.com” domain (where your images are) into this list and plugin won’t be replacing those links to HTTPS. This seems like something that can be used in your situation. But I cannot currently provide any ETA on this though. * For your scenario, I would recommend to use WP CLI to replace all your inner site links to HTTPS. Google something like “wp cli http to https”. Then just don’t enable “Force HTTPS” option in the plugin and this should do it. * But in general, I’d recommend to make all your images to use HTTPS. All modern browsers are already marking mixed content pages as insecure, and, over time, those marks will be more noticeable to the users. I understand the images are not hosted on your site, which is another problem BTW. Other sites may disappear without warning and this will break your website. So this needs to be addressed in complex. * Thread Starter [geoffm](https://wordpress.org/support/users/geoffm/) * (@geoffm) * [7 years, 9 months ago](https://wordpress.org/support/topic/not-forcing-external-urls-to-use-https/#post-10501181) * No, I agree about the links to non-secure sites, you are absolutely right, of course. It’s just that we simply don’t have any choice at the moment. I don’t own the web cam external site, and can’t force them to make it secure though I will suggest it to them. * Yes, the domains exclusion list would certainly solve my particular problem. * I’ll check out the WP CLI one. * Thanks for the fast responses, much appreciated. Viewing 5 replies - 1 through 5 (of 5 total) The topic ‘Not forcing external URLs to use https’ is closed to new replies. * ![](https://ps.w.org/https-redirection/assets/icon-128x128.png?rev=1779143) * [Easy HTTPS Redirection (SSL)](https://wordpress.org/plugins/https-redirection/) * [Frequently Asked Questions](https://wordpress.org/plugins/https-redirection/#faq) * [Support Threads](https://wordpress.org/support/plugin/https-redirection/) * [Active Topics](https://wordpress.org/support/plugin/https-redirection/active/) * [Unresolved Topics](https://wordpress.org/support/plugin/https-redirection/unresolved/) * [Reviews](https://wordpress.org/support/plugin/https-redirection/reviews/) * 5 replies * 4 participants * Last reply from: [geoffm](https://wordpress.org/support/users/geoffm/) * Last activity: [7 years, 9 months ago](https://wordpress.org/support/topic/not-forcing-external-urls-to-use-https/#post-10501181) * Status: resolved