I followed the instructions I found here: https://www.lsoft.com/manuals/lsv-faq/443SecuringtheLISTSERVwebinterfa.html to redirect all traffic from HTTP to HTTPS on my ListServ 16.5 installation. Everything worked except for Confirmation URLs, which threw a 500 error until I turned off the redirect rule.