HTTPS
Also called: ssl, tls, secure http
HTTPS (HyperText Transfer Protocol Secure) is HTTP encrypted with TLS, so data between a browser and a site stays private, tamper-proof, and provably sent to the real server. Google has used HTTPS as a lightweight ranking signal since 2014, and browsers now flag plain HTTP pages as "Not secure."
How HTTPS works and why Google cares
HTTPS wraps ordinary HTTP inside a TLS session. Before any page data moves, the browser and server run a TLS handshake: the server presents a certificate signed by a Certificate Authority, the two sides agree on keys, and everything after that is encrypted. That delivers the three protections Google names directly: encryption (eavesdroppers cannot read the traffic), data integrity (nothing is altered in transit), and authentication (you are talking to the real domain, not a man-in-the-middle).
Google confirmed HTTPS as a ranking signal in August 2014. It was called very lightweight, affecting fewer than 1% of global queries and carrying less weight than signals like high-quality content, with a note that Google might strengthen it over time. Treat it as a tie-breaker, not a growth lever. Adding a certificate rarely moves rankings on its own, but shipping plain HTTP in 2026 is a liability because Chrome and other browsers label it “Not secure.”
The details that actually break sites live in the migration. Google treats an HTTP-to-HTTPS move as a site move with URL changes. Redirect every HTTP URL to its HTTPS twin with a permanent 301, point canonical tags and internal links at https://, do not block HTTPS URLs in robots.txt or noindex them, add the HTTPS property in Search Console (data is not shared with the HTTP property), and consider HSTS so browsers request HTTPS automatically.
How it affects your traffic
Mixed content, redirect chains, an expired certificate, or an HTTPS page accidentally blocked in robots.txt can quietly drop pages from the index or scare users off with a browser warning, and none of it shows up in a quick content review. A clean HTTPS setup is table stakes before any other technical work pays off. Our Technical SEO service audits your certificate, redirect map, mixed-content warnings, and HSTS and canonical setup so the secure move helps your traffic instead of costing it.
Get Technical SEO that moves the needle
We turn terms like this into ranked pages and qualified pipeline. Start with a free Initial SEO Strategy.