Is it necessary to refuse https if the site works on http?

Question

Search Engine Optimization

Hello!
There is a site that has been working on http for several years and everything is fine. Yesterday the hoster issued an ssl certificate for this site and now the site is available both via http and https. I don’t plan to completely switch to https yet, due to the fear of losing positions in the search, as many did. I read that there is a possibility of a complete attack and search for Yandex.
The question is, do I need to write to the hosting provider to remove the ssl certificate, because it turns out that if the site is available both via http and https, the content is duplicated. I ask you for advice on how to proceed in this situation.
Thank you!

Answer 1

It is better to put a redirect https -> http. To be sure.

Answer 2

It is necessary to abandon http, to make an unconditional redirect from http to https. And in the search results you will be higher, because https resources take precedence over http resources in normal search engines.