You will need to add the Strict-Transport-Security (HSTS) header to your website which will force your browser to https instead of http for your site. You can do it in the web.config
<?xml version="1.0" encoding="utf-8"?>
<configuration>
<system.web>
<!-- Suppress "X-AspNet-Version" header -->
<httpRuntime enableVersionHeader="false" />
</system.web>
<system.webServer>
<httpProtocol>
<customHeaders>
<remove name="X-Powered-By" />
<add name="Content-Security-Policy" value="default-src 'self'"/>
<add name="Referrer-Policy" value="no-referrer" />
<add name="Strict-Transport-Security" value="max-age=31536000"/>
http://appetere.com/post/security-http-response-headers-for-net-websites-and-apis