HTTPS is now free, easy and increasingly ubiquitous. It's also now required if you don't want Google Chrome flagging the site as "Not secure". Yet still, many of the world's largest websites continue to serve content over unencrypted connections, putting users at risk even when no sensitive data is involved.
Following is a list of the world's top 100 websites by Alexa rank not automatically redirecting insecure requests to secure ones. You'll then find the top 50 sites by country underneath that. The data is driven by Scott Helme's nightly crawl and is explained in detail in the launch blog post for this project.
The World's Most Popular Websites Loaded Insecurely
Each of the following websites loads over an insecure connection without redirecting to a secure, encrypted connection. The 100 websites below represent 23 % of the world's largest 435 websites.
Reports by Country
Each of the following countries has a localised report of the top 50 websites not redirecting to secure connections.
AE AF AL AM AO AR AT AU AZ BA BB BD BE BF BG BH BJ BM BN BO BR BS BT BW BY CA CD CG CH CI CL CM CN CO CR CU CY CZ DE DK DO DZ EC EE EG ER ES ET FI FJ FO FR GA GB GE GH GI GN GQ GR GT GY HK HN HR HT HU ID IE IL IN IQ IR IS IT JM JO JP KE KG KH KR KW KY KZ LB LI LK LR LT LU LV LY MA MD ME MG MK ML MM MN MO MR MT MU MV MW MX MY MZ NA NE NG NI NL NO NP NZ OM PA PE PF PG PH PK PL PR PS PT PY QA RE RO RS RU RW SA SD SE SG SI SK SL SN SO SR SV SY TD TG TH TJ TL TM TN TR TT TW TZ UA UG US UY UZ VE VN VU WS YE ZA ZM ZW
Resources for Going HTTPS
If you're responsible for a website and aren't sure why HTTPS is important or would like resources to help make the transition, try these: