Start with enabling HTTPS on your challenge website..