Why No HTTPS? The World's Largest Websites Not Redirecting Insecure Requests to HTTPS


HTTPS is now free, easy and increasingly ubiquitous. It's also now required if you don't want Google Chrome flagging the site as "Not secure". Yet still, many of the world's largest websites continue to serve content over unencrypted connections, putting users at risk even when no sensitive data is involved.

Following is a list of the world's top 100 websites by Alexa rank not automatically redirecting insecure requests to secure ones. You'll then find the top 50 sites by country underneath that. The data is driven by Scott Helme's nightly crawl and is explained in detail in the launch blog post for this project.

The World's Most Popular Websites Loaded Insecurely

Each of the following websites loads over an insecure connection without redirecting to a secure, encrypted connection. The 100 websites below represent 23 % of the world's largest 435 websites.

Reports by Country

Each of the following countries has a localised report of the top 50 websites not redirecting to secure connections.

United Arab Emirates AE Afghanistan AF Albania AL Armenia AM Angola AO Argentina AR Austria AT Australia AU Azerbaijan AZ Bosnia and Herzegovina BA Barbados BB Bangladesh BD Belgium BE Burkina Faso BF Bulgaria BG Bahrain BH Benin BJ Bermuda BM Brunei Darussalam BN Bolivia, Plurinational State of BO Brazil BR Bahamas BS Bhutan BT Botswana BW Belarus BY Canada CA Congo, the Democratic Republic of the CD Congo CG Switzerland CH Côte d'Ivoire CI Chile CL Cameroon CM China CN Colombia CO Costa Rica CR Cuba CU Cyprus CY Czechia CZ Germany DE Denmark DK Dominican Republic DO Algeria DZ Ecuador EC Estonia EE Egypt EG Eritrea ER Spain ES Ethiopia ET Finland FI Fiji FJ Faroe Islands FO France FR Gabon GA United Kingdom of Great Britain and Northern Ireland GB Georgia GE Ghana GH Gibraltar GI Guinea GN Equatorial Guinea GQ Greece GR Guatemala GT Guyana GY Hong Kong HK Honduras HN Croatia HR Haiti HT Hungary HU Indonesia ID Ireland IE Israel IL India IN Iraq IQ Iran, Islamic Republic of IR Iceland IS Italy IT Jamaica JM Jordan JO Japan JP Kenya KE Kyrgyzstan KG Cambodia KH Korea, Republic of KR Kuwait KW Cayman Islands KY Kazakhstan KZ Lebanon LB Liechtenstein LI Sri Lanka LK Liberia LR Lithuania LT Luxembourg LU Latvia LV Libya LY Morocco MA Moldova, Republic of MD Montenegro ME Madagascar MG Macedonia, the former Yugoslav Republic of MK Mali ML Myanmar MM Mongolia MN Macao MO Mauritania MR Malta MT Mauritius MU Maldives MV Malawi MW Mexico MX Malaysia MY Mozambique MZ Namibia NA Niger NE Nigeria NG Nicaragua NI Netherlands NL Norway NO Nepal NP New Zealand NZ Oman OM Panama PA Peru PE French Polynesia PF Papua New Guinea PG Philippines PH Pakistan PK Poland PL Puerto Rico PR Palestine, State of PS Portugal PT Paraguay PY Qatar QA Réunion RE Romania RO Serbia RS Russian Federation RU Rwanda RW Saudi Arabia SA Sudan SD Sweden SE Singapore SG Slovenia SI Slovakia SK Sierra Leone SL Senegal SN Somalia SO Suriname SR El Salvador SV Syrian Arab Republic SY Chad TD Togo TG Thailand TH Tajikistan TJ Timor-Leste TL Turkmenistan TM Tunisia TN Turkey TR Trinidad and Tobago TT Taiwan, Province of China TW Tanzania, United Republic of TZ Ukraine UA Uganda UG United States of America US Uruguay UY Uzbekistan UZ Venezuela, Bolivarian Republic of VE Viet Nam VN Vanuatu VU Samoa WS Yemen YE South Africa ZA Zambia ZM Zimbabwe ZW

Resources for Going HTTPS

If you're responsible for a website and aren't sure why HTTPS is important or would like resources to help make the transition, try these: