Why No HTTPS?
HTTPS is now free, easy and increasingly ubiquitous. It's also now required if you don't want
Google Chrome flagging the site as "Not secure".
Yet still, many of the world's largest websites continue to serve content over unencrypted
connections, putting users at risk even when no sensitive data is involved.
Following is a list of the world's top 100 websites by Tranco rank
not automatically redirecting insecure requests to secure ones. You'll then find the top 50
sites by country underneath that. The data is driven by
Scott Helme's nightly crawl and is
explained in detail in the launch blog post for this project.
The World's Most Popular Websites Loaded Insecurely
Each of the following websites loads over an insecure connection without redirecting to a secure,
encrypted connection. The 100 websites below represent 6%
of the world's largest 1,803 websites.
Tranco Rank |
Website |
13. |
baidu.com
|
44. |
xinhuanet.com
|
60. |
apache.org
|
64. |
myshopify.com
|
72. |
w3.org
|
116. |
tianya.cn
|
159. |
gnu.org
|
167. |
go.com
|
181. |
nginx.org
|
221. |
babytree.com
|
244. |
hugedomains.com
|
319. |
washington.edu
|
323. |
deviantart.com
|
329. |
rednet.cn
|
402. |
swiat-kamienia.pl
|
410. |
allaboutcookies.org
|
436. |
moatads.com
|
443. |
eepurl.com
|
456. |
people.com.cn
|
464. |
example.com
|
470. |
jiameng.com
|
478. |
yimg.com
|
578. |
youronlinechoices.com
|
623. |
soso.com
|
634. |
www.gov.cn
|
657. |
360.com
|
671. |
fao.org
|
673. |
videocampaign.co
|
674. |
cnnic.cn
|
684. |
comodoca.com
|
688. |
chinadaily.com.cn
|
717. |
redfin.com
|
760. |
padlet.com
|
807. |
sonhoo.com
|
831. |
sectigo.com
|
837. |
adsymptotic.com
|
898. |
genius.com
|
901. |
pinterest.ca
|
946. |
icio.us
|
947. |
tremorhub.com
|
953. |
myworkdayjobs.com
|
961. |
neobux.com
|
970. |
typekit.net
|
973. |
crunchyroll.com
|
1,006. |
360doc.com
|
1,009. |
ih5.cn
|
1,012. |
rs6.net
|
1,041. |
cnnindonesia.com
|
1,046. |
dmoz.org
|
1,048. |
netdna-ssl.com
|
1,050. |
wa.gov
|
1,088. |
bu.edu
|
1,108. |
wildapricot.org
|
1,116. |
gusuwang.com
|
1,119. |
creativecdn.com
|
1,131. |
dcard.tw
|
1,193. |
pendo.io
|
1,214. |
faqs.org
|
1,243. |
brightcove.net
|
1,266. |
taleo.net
|
1,270. |
it168.com
|
1,296. |
chinanews.com
|
1,305. |
wikidot.com
|
1,315. |
ihg.com
|
1,321. |
dmm.co.jp
|
1,347. |
biglobe.ne.jp
|
1,356. |
dedecms.com
|
1,372. |
youronlinechoices.eu
|
1,378. |
house365.com
|
1,402. |
renren.com
|
1,405. |
cygwin.com
|
1,429. |
git-scm.com
|
1,431. |
1drv.ms
|
1,457. |
justdial.com
|
1,459. |
videolan.org
|
1,473. |
tinypic.com
|
1,512. |
china.com.cn
|
1,547. |
rutracker.org
|
1,556. |
chinanetrank.com
|
1,587. |
hexun.com
|
1,612. |
axieinfinity.com
|
1,613. |
etherscan.io
|
1,614. |
shippingchina.com
|
1,625. |
ssense.com
|
1,645. |
metmuseum.org
|
1,659. |
openoffice.org
|
1,660. |
dangdang.com
|
1,661. |
southcn.com
|
1,664. |
royalbank.com
|
1,666. |
dianping.com
|
1,675. |
onmarshtompor.com
|
1,695. |
acuityplatform.com
|
1,723. |
cafe24.com
|
1,738. |
samsungapps.com
|
1,755. |
11st.co.kr
|
1,766. |
zazzle.com
|
1,782. |
loopme.me
|
1,790. |
sourceware.org
|
1,802. |
recaptcha.net
|
1,803. |
consultant.ru
|
Reports by Country
Each of the following countries has a localised report of the top 50 websites not redirecting to
secure connections.
AD
AE
AF
AG
AI
AL
AM
AO
AR
AS
AT
AU
AZ
BA
BB
BD
BE
BF
BG
BH
BI
BJ
BM
BN
BO
BR
BS
BT
BW
BY
BZ
CA
CC
CD
CF
CG
CH
CI
CL
CM
CN
CO
CR
CU
CX
CY
CZ
DE
DK
DO
DZ
EC
EE
EG
ER
ES
ET
FI
FJ
FM
FO
FR
GA
GB
GD
GE
GF
GG
GH
GI
GL
GN
GQ
GR
GS
GT
GY
HK
HN
HR
HT
HU
ID
IE
IL
IM
IN
IO
IQ
IR
IS
IT
JM
JO
JP
KE
KG
KH
KR
KW
KZ
LA
LB
LC
LI
LK
LT
LU
LV
LY
MA
MC
MD
ME
MG
MK
ML
MM
MN
MO
MR
MS
MT
MU
MV
MW
MX
MY
MZ
NA
NE
NG
NI
NL
NO
NP
NR
NU
NZ
OM
PA
PE
PF
PG
PH
PK
PL
PM
PR
PS
PT
PW
PY
QA
RE
RO
RS
RU
RW
SA
SB
SC
SD
SE
SG
SH
SI
SK
SM
SN
SO
SR
ST
SV
SX
SY
SZ
TC
TD
TF
TG
TH
TJ
TK
TL
TM
TN
TO
TR
TT
TV
TW
TZ
UA
UG
US
UY
UZ
VC
VE
VG
VN
VU
WF
WS
YE
ZA
ZM
ZW
Resources for Going HTTPS
If you're responsible for a website and aren't sure why HTTPS is important or would like
resources to help make the transition, try these:
- Does My Site Need HTTPS?
- HTTPS Is Easy!
- Here's Why Your Static Website Needs HTTPS
- Is TLS Fast Yet?
- HTTP vs HTTPS Speed Test
- Understanding HTTP Strict Transport Security (HSTS)
- What Every Developer Must Know About HTTPS