Why No HTTPS?

HTTPS is now free, easy and increasingly ubiquitous. It's also now required if you don't want Google Chrome flagging the site as "Not secure". Yet still, many of the world's largest websites continue to serve content over unencrypted connections, putting users at risk even when no sensitive data is involved.

Following is a list of the world's top 100 websites by Tranco rank not automatically redirecting insecure requests to secure ones. You'll then find the top 50 sites by country underneath that. The data is driven by Scott Helme's nightly crawl and is explained in detail in the launch blog post for this project.


The World's Most Popular Websites Loaded Insecurely

Each of the following websites loads over an insecure connection without redirecting to a secure, encrypted connection. The 100 websites below represent 10 % of the world's largest 1,162 websites.

Tranco Rank Website
11. China baidu.com
16. China sohu.com
61. China xinhuanet.com
80. United States of America apache.org
84. United States of America w3.org
102. China babytree.com
111. United States of America myshopify.com
118. United States of America whitepages.com
123. China tianya.cn
129. United States of America go.com
150. United States of America mit.edu
153. United States of America gnu.org
157. China panda.tv
160. China soso.com
166. China china.com.cn
201. United States of America hugedomains.com
209. China rednet.cn
242. United States of America nature.com
280. United States of America drudgereport.com
295. China nginx.org
296. United States of America techcrunch.com
301. United States of America moatads.com
319. China miit.gov.cn
335. China beian.gov.cn
338. China 17ok.com
341. United States of America washington.edu
348. Mexico thestartmagazine.com
357. China jrj.com.cn
365. United States of America rlcdn.com
375. United States of America definition.org
392. United States of America brainly.com
413. China ntp.org
477. China chinadaily.com.cn
481. United States of America tripod.com
482. United States of America tapad.com
493. United States of America axs.com
494. United States of America yimg.com
502. United States of America startribune.com
503. Canada cbc.ca
505. United States of America geocities.com
525. China gmw.cn
526. China eastday.com
537. Netherlands eepurl.com
571. United States of America cafemom.com
593. United States of America ucla.edu
602. India hdfcbank.com
610. India example.com
639. United States of America gohoi.com
641. United States of America techofires.com
650. China www.gov.cn
657. United Kingdom of Great Britain and Northern Ireland ox.ac.uk
662. United States of America sigonews.com
670. United States of America lenovo.com
672. United States of America itfactly.com
707. United States of America aboutads.info
708. France reverso.net
740. United States of America ideapuls.com
752. United States of America sendgrid.net
772. United States of America genius.com
784. United States of America easybib.com
787. United States of America nyu.edu
789. United States of America shareasale-analytics.com
792. United States of America bizrate.com
805. United States of America redfin.com
818. United States of America ufl.edu
819. United States of America icio.us
827. Brazil cowner.net
834. Japan oecd.org
837. China youth.cn
840. China cctv.com
851. United States of America theconversation.com
852. United States of America trend-chaser.com
906. United States of America imageshack.us
909. China youdao.com
911. India fao.org
919. United States of America angelfire.com
923. China chinanews.com
928. China hexun.com
939. Germany youronlinechoices.com
944. China tencent.com
948. United States of America lijit.com
969. China dedecms.com
982. United States of America senate.gov
1,002. China zol.com.cn
1,006. China 51sole.com
1,007. United States of America bu.edu
1,010. Japan livedoor.jp
1,041. United States of America adoptapet.com
1,044. United States of America rutgers.edu
1,059. United States of America ihg.com
1,070. Japan dmm.co.jp
1,075. United States of America medicinenet.com
1,098. United States of America zemanta.com
1,113. United States of America wikidot.com
1,117. United States of America tremorhub.com
1,122. India dmoz.org
1,125. China cntv.cn
1,149. United States of America zara.com
1,153. United States of America alternativenation.net
1,162. Iran, Islamic Republic of namnak.com

Reports by Country

Each of the following countries has a localised report of the top 50 websites not redirecting to secure connections.

Andorra AD United Arab Emirates AE Afghanistan AF Antigua and Barbuda AG Anguilla AI Albania AL Armenia AM Angola AO Argentina AR American Samoa AS Austria AT Australia AU Azerbaijan AZ Bosnia and Herzegovina BA Barbados BB Bangladesh BD Belgium BE Burkina Faso BF Bulgaria BG Bahrain BH Benin BJ Bermuda BM Brunei Darussalam BN Bolivia, Plurinational State of BO Brazil BR Bahamas BS Bhutan BT Botswana BW Belarus BY Belize BZ Canada CA Cocos (Keeling) Islands CC Congo, the Democratic Republic of the CD Central African Republic CF Congo CG Switzerland CH Côte d'Ivoire CI Chile CL Cameroon CM China CN Colombia CO Costa Rica CR Cuba CU Cabo Verde CV Curaçao CW Christmas Island CX Cyprus CY Czechia CZ Germany DE Denmark DK Dominica DM Dominican Republic DO Algeria DZ Ecuador EC Estonia EE Egypt EG Eritrea ER Spain ES Ethiopia ET Finland FI Fiji FJ Micronesia, Federated States of FM Faroe Islands FO France FR Gabon GA United Kingdom of Great Britain and Northern Ireland GB Grenada GD Georgia GE French Guiana GF Guernsey GG Ghana GH Gibraltar GI Greenland GL Gambia GM Guinea GN Equatorial Guinea GQ Greece GR South Georgia and the South Sandwich Islands GS Guatemala GT Guyana GY Hong Kong HK Honduras HN Croatia HR Haiti HT Hungary HU Indonesia ID Ireland IE Israel IL Isle of Man IM India IN British Indian Ocean Territory IO Iraq IQ Iran, Islamic Republic of IR Iceland IS Italy IT Jamaica JM Jordan JO Japan JP Kenya KE Kyrgyzstan KG Cambodia KH Korea, Republic of KR Kuwait KW Cayman Islands KY Kazakhstan KZ Lao People's Democratic Republic LA Lebanon LB Saint Lucia LC Liechtenstein LI Sri Lanka LK Lithuania LT Luxembourg LU Latvia LV Libya LY Morocco MA Monaco MC Moldova, Republic of MD Montenegro ME Madagascar MG Macedonia, the former Yugoslav Republic of MK Mali ML Myanmar MM Mongolia MN Macao MO Martinique MQ Mauritania MR Montserrat MS Malta MT Mauritius MU Maldives MV Malawi MW Mexico MX Malaysia MY Mozambique MZ Namibia NA Niger NE Nigeria NG Nicaragua NI Netherlands NL Norway NO Nepal NP Niue NU New Zealand NZ Oman OM Panama PA Peru PE French Polynesia PF Papua New Guinea PG Philippines PH Pakistan PK Poland PL Puerto Rico PR Palestine, State of PS Portugal PT Palau PW Paraguay PY Qatar QA Réunion RE Romania RO Serbia RS Russian Federation RU Rwanda RW Saudi Arabia SA Seychelles SC Sudan SD Sweden SE Singapore SG Saint Helena, Ascension and Tristan da Cunha SH Slovenia SI Slovakia SK Sierra Leone SL San Marino SM Senegal SN Somalia SO Suriname SR Sao Tome and Principe ST El Salvador SV Sint Maarten (Dutch part) SX Syrian Arab Republic SY Eswatini SZ Turks and Caicos Islands TC Chad TD French Southern Territories TF Togo TG Thailand TH Tajikistan TJ Tokelau TK Timor-Leste TL Turkmenistan TM Tunisia TN Tonga TO Turkey TR Trinidad and Tobago TT Tuvalu TV Taiwan, Province of China TW Tanzania, United Republic of TZ Ukraine UA Uganda UG United States of America US Uruguay UY Uzbekistan UZ Holy See VA Saint Vincent and the Grenadines VC Venezuela, Bolivarian Republic of VE Virgin Islands, British VG Viet Nam VN Vanuatu VU Samoa WS Yemen YE Mayotte YT South Africa ZA Zambia ZM Zimbabwe ZW


Resources for Going HTTPS

If you're responsible for a website and aren't sure why HTTPS is important or would like resources to help make the transition, try these:

  1. Does My Site Need HTTPS?
  2. HTTPS Is Easy!
  3. Here's Why Your Static Website Needs HTTPS
  4. Is TLS Fast Yet?
  5. HTTP vs HTTPS Speed Test
  6. Understanding HTTP Strict Transport Security (HSTS)
  7. What Every Developer Must Know About HTTPS