Continuing the discussion from Webroot and https-only server impossible:
This piece of info prevented me from doing ugly things (stopping redirects to HTTPS temporarily, restarting the server.. twice / cert), which I was ready to commit because of my stupid conclusions based on this good piece of info:
that's why I thought it'd be good to clip the good news (from April 2017):
"The HTTP-01 validator is willing to follow redirects, including redirects to HTTPS"