Including here, by default. Next step is to automatically redirect all visitors to the https protocol by editing the .htaccess file.
Should probably do that on a real computer instead of my mobile device.
Okay, I’m typing on a real keyboard now. I found a relevant Stack Overflow page to help redirect all http requests to https. Everyone should see the closed padlock icon now, even if they don’t explicitly specify https when they type my domain (or if they are referred by an old link).