This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(156.8, 28.999999999999996%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
I would like to use HTTP only with my custom domain set up on Azure website. On default Azure website is defined to redirect all traffic from HTTP to HTTPS. I have D1 plan for my website and don't want to go higher now before I get users into my site. Also don't need any HTTPS. HTTP will be enough. Could you please help me turn it on? Azure forces me to go for higher plans which is not expected by me at the moment.
Hi @Adam-6200,
I think you can't prevent this. When you create the App Services service, it will automatically assign the certificate and then you have to use HTTPS.
You should a switch https only switch under custom domains
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(185.6, 59%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
@Adam just checking if you have chance to see above response. As mentioned by vb2ae from the Azure Portal > Go to your app service > on left blade select custom domain > select Https off.
You may refer to this doc details https://learn.microsoft.com/en-us/azure/app-service/configure-ssl-bindings#secure-a-custom-domain
Let us know if issue persists.
@SnehaAgrawal-MSFT This option was switched off by default and even that it's off, I still getting redirection from http to https. It makes no difference for me when I change it. Is this a bug?
Thanks for reply! If I have understood your scenario right, you are having D1 plan for your Web app and don’t want to go for higher plan right now. Sure. To elaborate on this In D1 plan you can successfully add and map custom domain but cannot Add binding or secure your custom domain. If you don’t want to secure your domain you can still use it, but this will show as a Notification or SSL State that this domain is not secure. Just to confirm if you are seeing similar as below. If not, could you please share your screen shot to help you better on this.
@SnehaAgrawal-MSFT Yes, this is what I see in my panel. I would like to use it without secure my domain for now. At the same time I don't want this 'not secure' warning occurs whenever someone visit the site. It's really bad if it says that the site can be dangerous and it's advised to leave it. Why is https forced even if HTTPS Only is switched off?
Thanks for reply! To elaborate on HTTPS only feature-
HTTPS only: ON this means, by default, anyone can still access your app using HTTP and using this feature On you can redirect all HTTP requests to the HTTPS port.
HTTPS only: OFF this means, by default, anyone can access your app using HTTP.
If you don’t want to secure your domain for now, you can still use this domain, but secure and non-secure notification will depend on browser used. All new browser, Edge, Chrome, safari show this as non-secure although Internet explorer doesn’t show this.
Below is screen shot from Internet explorer:
