TECHNICAL · SEO GLOSSARY

HTTPS

The secure version of HTTP using TLS/SSL encryption — a confirmed (minor) Google ranking signal since 2014, and a prerequisite for modern browser security indicators, Core Web Vitals measurement, and user trust.

Definition

HTTPS (Hypertext Transfer Protocol Secure) encrypts data in transit between a browser and a web server using TLS (Transport Layer Security). The "S" in HTTPS indicates that the connection is encrypted. Google confirmed HTTPS as a ranking signal in August 2014 and has since made it a baseline expectation: Chrome marks all HTTP pages as "Not Secure" in the address bar, Google has said it uses HTTPS as a tiebreaker between otherwise equal pages, and HTTP pages are excluded from some Page Experience signals. The HTTPS migration process involves: obtaining a TLS certificate (Let's Encrypt provides free certificates; most hosts now include them), configuring the server to serve all pages over HTTPS, implementing 301 redirects from all HTTP URLs to their HTTPS equivalents, updating all internal links, canonical tags, and sitemap entries to use `https://`, and submitting the HTTPS property in Google Search Console as a separate property. Common post-migration issues: mixed content warnings (a page served over HTTPS with some resources — images, scripts, stylesheets — still loading via HTTP), HTTP links in the sitemap, and old backlinks still pointing to HTTP URLs.

Why it matters for SEO

HTTPS is table stakes for modern SEO — almost all sites that compete seriously for search traffic use HTTPS. The direct ranking benefit is minor (it's described by Google as a lightweight tiebreaker), but the indirect effects are significant: (a) Chrome's "Not Secure" warning increases bounce rate on HTTP pages, indirectly affecting engagement signals; (b) many third-party SEO tools and web performance measurement systems (Lighthouse, CrUX) require HTTPS; (c) modern browser features used for performance (HTTP/2, HTTP/3) require HTTPS; (d) user trust in submitting forms or making purchases on HTTP sites is severely degraded. For any site not on HTTPS: migrate immediately — the process is low-risk and Let's Encrypt makes certificates free.

How DeepSEOAnalysis checks this

The audit checks: whether the site is served over HTTPS, whether HTTP-to-HTTPS redirects are in place for the apex domain and www subdomain, whether the canonical tags and sitemap use HTTPS URLs, whether any mixed content (HTTP resources on HTTPS pages) is detected during the crawl, and whether the TLS certificate is valid and not expired. HTTPS failures are reported as critical issues — they are the most foundational technical SEO requirement.

Useful tools and resources

See how your site scores on HTTPS.

The free DeepSEOAnalysis audit checks https and 100+ other signals. Full report, no signup.

Run a free audit →