title: What HTTP code to return for wrong protocol
body: <p>I'm wanting to return a HTTP code for a user that hits HTTP on a HTTPS only domain or vice versa. Which <a href="http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html" rel="nofollow noreferrer">HTTP Code</a> would be suited for this?</p>
  
  <p>I don't want to redirect to the correct protocol as it would promote bad/insecure links and my server setup doesn't allow me to disable the protocol on the domains.</p>
  
  <p>I'm thinking 400, 403, 406, or 500.</p>