Always Use HTTPS Extension ?

Some websites don't support HTTPS, if you are not entering any data into these sorts of sites then its not that harmful.

Well that is what they are supposed to do is have the right certificate. I am not sure how that is a misconception because that is how it works.
HTTPS is SSL encryption over a connection so yes it is security focused that is the whole point.

This forum has HTTPS even though it does not really need it, well it may do for back end reasons but as a user it does not warrant it. Now if you are going to the bank then yeah you would want them to have HTTPS for example.

The hotel stuff in your cases OP maybe not an issue unless you are using credentials there like payment or something.

Chrome enables it by default now and it will be mandatory soon, Edge will follow, you can just wait a few weeks.

Google Chrome now auto-upgrades to secure connections for all users

I have not used http for several years, I even block ports 80/53 in the firewall for security/privacy reasons.
Any webpage that does not have https, should not even exist, it is obsolete. It cost nothing to use https.

mike888 said:

I have tried to enable the Microsoft experimental flag edge://flags/#edge-automatic-https which adds a further line in the privacy,search and services section of the browser. However when I try and enable it in the settings I get a red circle with a diagonal line down it. So that was no use.

You can force it by policy:

Code:

rem Automatically switch to more secure connections with Automatic HTTPS / 0 - Disabled / 1 - Switch to supported domains / 2 - Always
reg add "HKLM\Software\Policies\Microsoft\Edge" /v "AutomaticHttpsDefault" /t REG_DWORD /d "2" /f

I think HTTP is still ok depending on the websites purpose like a benign website that is just displaying some raw html or basic css for multimedia purposes might not need to have HTTPS or a locally hosted web front end or database does not need it either.

i guess it depends on context, what you are doing and how you are online even, if you are on shared internet or public internet with other that are not trusted then you most certainly want to be using HTTPS compatible websites.

i guess also side note HTTPS has been around since Netscape made by them actually and its only really made a dominate shift to priority standard in the last several years i guess because you can get certs for free or low cost depending on scale these days. Having some condition on that matter.

mike888 said:

I have tried to enable the Microsoft experimental flag edge://flags/#edge-automatic-https which adds a further line in the privacy,search and services section of the browser. However when I try and enable it in the settings I get a red circle with a diagonal line down it. So that was no use.

I get the same. If Edge says "Managed by your organization" at the top of the settings page that option won't be available.

So I've applied some tweaks, including disable DOH and can't enable that setting either.

I want to keep the tweaks/ applied policies so here's an alternative.

Force HTTPS for all traffic - Chrome Web Store

With Force Https enabled:

With Force Https disabled for the same site:

So forcing https might break some content on some sites in which case you'd need to disable the extension when visiting the problem site.