diff -r bf2389b1f15e -r f28c85e29afc mercurial/hgweb/common.py
--- a/mercurial/hgweb/common.py	Wed Oct 11 03:18:04 2017 +0200
+++ b/mercurial/hgweb/common.py	Wed Oct 11 03:29:09 2017 +0200
@@ -69,7 +69,7 @@
     # require ssl by default for pushing, auth info cannot be sniffed
     # and replayed
     scheme = req.env.get('wsgi.url_scheme')
-    if hgweb.configbool('web', 'push_ssl', True) and scheme != 'https':
+    if hgweb.configbool('web', 'push_ssl') and scheme != 'https':
         raise ErrorResponse(HTTP_FORBIDDEN, 'ssl required')
 
     deny = hgweb.configlist('web', 'deny_push')