One.com is offering Lets-encrypt certificates making websites more secure and awesome. However, as of today, it will not enforce HTTPS per default when users call on HTTP traffic. To enforce HTTPS simply create .htaccess and paste below into the header of your .htaccess file. (click post to see code)