What Happens When HTTPS Is Misconfigured? Common Risks and How to Fix Them

### Executive Summary: HTTPS misconfigurations can silently negate encryption and trust, exposing users to interception, impersonation, and data leakage; this report summarizes common issues—outdated TLS versions, missing or weak HSTS, mixed content, and certificate errors—provides practical remediation steps (disable old TLS, enforce HSTS, fix mixed content, monitor and renew certificates), and recommends continuous monitoring and header hardening, including third-party supply-chain monitoring via SecurityScorecard’s SCDR.