Any HTTPS->HTTP redirect cannot work, because the redirect operate on the HTTP level, on top of all SSL/TSL stuff, and the problem with Windows XP is at this level. If you try this with CURL all seems to work, but only because CURL has a proper SSL/TLS implementation.
Try with a virtual machine (you can get one for free at https://dev.windows.com/en-us/microsoft-edge/tools/vms/windows/) and you will see that the redirect will not work.
The only thing that can work is NOT redirecting windows XP users from HTTP to HTTPS, but if they follow an HTTPS link the browser will display an error for sure.
4 Likes