The only right option would be a permanent 301 redirect from http to https protocol. In this case, 302 (temporary) will be accepted as a non-permanent, potentially dangerous security solution in the future.