I want to force the use of SSL in the admin interface of the publish instance. Configuring this "https://docs.adobe.com/docs/en/aem/6-2/deploy/configuring/config-ssl.html#Forcing the Use of the SSL Port", does just that. However, I need my dispatcher to connect over http (set through dispatcher.any). This appears to work but now I'm wondering why publish does not force the redirect to SSL.
You are correct. It looks like the dispatcher makes the request to the publish instance using the end user facing URL host as the host header, which doesn't match the machinename.port I am forcing SSL on.