What does Google say about SEO? /
Quick SEO Quiz

Test your SEO knowledge in 3 questions

Less than 30 seconds. Find out how much you really know about Google search.

🕒 ~30s 🎯 3 questions 📚 SEO Google

Official statement

Using HTTPS is a fundamental criterion for Page Experience. The page must be served over HTTPS, the canonical tag must point to the HTTPS version, and HTTP traffic must be automatically redirected to HTTPS.
🎥 Source video

Extracted from a Google Search Central video

💬 EN 📅 10/08/2021 ✂ 12 statements
Watch on YouTube →
Other statements from this video 11
  1. Comment la révision annuelle des critères Page Experience impacte-t-elle votre stratégie SEO ?
  2. Pourquoi la Page Experience est-elle divisée en deux éléments cruciaux pour le SEO ?
  3. Pourquoi HTTPS est-il crucial pour le SEO aujourd'hui?
  4. Pourquoi la mobile-friendliness change-t-elle le paysage du SEO ?
  5. Comment garantir que votre site est vraiment mobile-friendly ?
  6. Pourquoi les plugins Flash et Quicksilver doivent-ils disparaître de vos sites ?
  7. Pourquoi les interstitiels intrusifs impactent-ils votre SEO ?
  8. Pourquoi Google tolère-t-il certains interstitiels sur votre site ?
  9. Est-ce que la Search Console est vraiment le pivot pour l'experience page en SEO ?
  10. Pourquoi la Page Experience est-elle cruciale pour le carrousel Top Stories ?
  11. AMP, game changer pour la conformité Page Experience ?
📅
Official statement from (4 years ago)
TL;DR

Google confirms that HTTPS is a fundamental criterion for Page Experience. Specifically, your page must be served over HTTPS, the canonical tag should point to the HTTPS version, and any HTTP requests must be automatically redirected in a 301 to HTTPS. No HTTPS = negative signal for your ranking.

What you need to understand

Why does Google place such importance on HTTPS?<\/h3>

For several years, Google has been pushing for a fully encrypted web. HTTPS<\/strong> protects the data exchanged between the browser and the server—even if your site does not collect any sensitive data.<\/p>

Patrick Kettner's statements leave no ambiguity: HTTPS is no longer a recommendation, it is a fundamental criterion for Page Experience<\/strong>. Without HTTPS, your page cannot claim to provide a good user experience according to Google's standards.<\/p>

What does this mean technically?<\/h3>

There are three clear requirements. First, your page must be served via HTTPS<\/strong>—not HTTP with a poorly configured SSL certificate.<\/p>

Next, the canonical tag<\/strong> must point to the HTTPS version of your URL, even if the page is already served over HTTPS. This avoids sending mixed signals to Google.<\/p>

Finally, any attempt to access via HTTP should trigger an automatic 301 redirect<\/strong> to the HTTPS version. There should not be any pages responding in HTTP, even temporarily.<\/p>

Does HTTPS actually impact ranking?<\/h3>

Google confirmed back in 2014 that HTTPS is a ranking factor<\/strong>. The weight is still low compared to other signals, but it does exist.<\/p>

The real issue, however, is that without HTTPS, your site cannot tick the Page Experience box—a set of criteria that, when combined, has a measurable impact on visibility. Chrome also displays 'Not Secure' alerts on HTTP pages, which drives users away.<\/p>

  • HTTPS is a fundamental criterion<\/strong> for Page Experience according to Google.<\/li>
  • The canonical tag must point to the HTTPS version.<\/li>
  • Any HTTP request must be automatically redirected in 301 to HTTPS.<\/li>
  • Without HTTPS, it's impossible to achieve a good score on Core Web Vitals and overall Page Experience.<\/li>
  • Chrome labels HTTP pages as 'Not Secure', which increases the bounce rate.<\/li><\/ul>

SEO Expert opinion

Is this statement consistent with what we observe in the field?<\/h3>

Absolutely. For years, sites without HTTPS have been gradually losing ground in the SERPs. Not in a brutal way, but the signals are accumulating: alerts in Chrome, exclusion from certain functionalities (PWA, precise geolocation), and now a direct link to Page Experience.<\/p>

What's new here is the official clarification<\/strong>: HTTPS is no longer just 'recommended', it is mandatory<\/strong> for claiming a good Page Experience. Google is not saying that your page will never rank without HTTPS, but that you start at a disadvantage.<\/p>

What nuances should be added?<\/h3>

Let's be honest: HTTPS alone won't work miracles. If your content is poor or your Core Web Vitals are terrible, switching to HTTPS won't change anything.<\/p>

But the reverse is also true. A site with excellent content, solid backlinks, but still on HTTP, is shooting itself in the foot. HTTPS has become a prerequisite<\/strong>, not a growth lever.<\/p>

Another point: the mention of the canonical tag pointing to HTTPS is essential. I've seen HTTPS sites whose canonical still pointed to the old HTTP version—result, Google indexed both versions and diluted PageRank.<\/p>

What to do if your site has mixed content?<\/h3>

Mixed content<\/strong> (HTTP resources loaded on an HTTPS page) remains a common problem. Chrome now blocks the loading of certain unsecured resources, which can break functionalities or visuals.<\/p>

Google does not explicitly mention this in its declaration, but it's a direct corollary: if your page is in HTTPS but loads images, scripts, or CSS via HTTP, you are not fully meeting the criterion. [To Verify]<\/strong>: Does Google tolerate a certain threshold of mixed content without penalty? Field observations suggest not—it's better to migrate everything.<\/p>

Warning:<\/strong> A poorly executed HTTPS migration can result in a temporary traffic drop. Check your redirects, sitemap, canonicals, and internal links before switching.<\/div>

Practical impact and recommendations

What concrete steps should be taken to ensure compliance?<\/h3>

First, obtain a valid SSL certificate<\/strong>. Let's Encrypt offers free and automated certificates—there's no excuse not to have one.<\/p>

Next, configure your server so that all HTTP requests are redirected permanently in 301<\/strong> to HTTPS. A poorly configured .htaccess can create redirect loops or allow HTTP traffic to slip through.<\/p>

Ensure that all your canonical tags<\/strong> point to the HTTPS URLs, even for pages that are already served in HTTPS. It's redundant, but it avoids ambiguities for Google.<\/p>

What mistakes should be avoided during the HTTPS migration?<\/h3>

A classic mistake: migrating to HTTPS but forgetting to update the XML sitemap<\/strong>. Google will continue to crawl the old HTTP URLs, slowing down the transition.<\/p>

Another pitfall: leaving internal links<\/strong> pointing to the old HTTP URLs. Even if the 301 redirection works, it dilutes PageRank and increases the crawl budget consumed.<\/p>

Finally, do not overlook mixed content<\/strong>. Review your templates to spot hardcoded calls to HTTP resources (images, fonts, external scripts). A simple 'http://' missed in a CDN can break the display.<\/p>

How can I check that my site is properly configured?<\/h3>

Use the Google Search Console<\/strong> to check the indexing of your HTTPS URLs. If any HTTP URLs still appear, there's a lingering problem (canonical, sitemap, or internal links).<\/p>

Manually test several pages by entering the HTTP URL in the browser—you should be redirected instantly to HTTPS with a 301<\/strong> code, not a 302.<\/p>

Finally, scrutinize your site with a tool like Why No Padlock<\/strong> or JitBit SSL Check<\/strong> to detect any mixed content that could harm Page Experience.<\/p>

  • Obtain a valid SSL certificate (Let's Encrypt, Cloudflare, or paid)<\/li>
  • Configure a permanent 301 redirect from HTTP to HTTPS at the server level<\/li>
  • Update all canonical tags to point to HTTPS URLs<\/li>
  • Modify the XML sitemap to reference only HTTPS URLs<\/li>
  • Correct all hardcoded internal links in HTTP<\/li>
  • Eliminate all mixed content (resources loaded via HTTP on HTTPS pages)<\/li>
  • Check indexing in Search Console and enforce reindexing if necessary<\/li>
  • Manually test redirections on several key URLs<\/li><\/ul>
    Switching to HTTPS has become essential. It's no longer a mere 'nice to have'—it's a prerequisite for meeting Google's Page Experience criteria. The migration may seem straightforward, but it comes with numerous technical pitfalls: poorly configured redirects, mixed content, outdated canonicals, and sitemaps not updated. A mistake can lead to temporary, or even lasting, visibility loss. If you're not comfortable with these technical aspects or managing a site with a complex history, seeking the expertise of a specialized SEO agency can help you avoid many pitfalls and ensure a smooth transition.<\/div>

❓ Frequently Asked Questions

Le HTTPS a-t-il un impact direct sur le ranking Google ?
Oui, le HTTPS est un facteur de classement confirmé depuis 2014. Son poids reste modéré, mais il est désormais un critère fondamental de la Page Experience, dont l'impact global sur le ranking est mesurable.
Que se passe-t-il si ma balise canonical pointe encore vers HTTP ?
Google risque d'indexer la version HTTP au lieu de HTTPS, diluant ainsi votre PageRank et créant des problèmes de duplicate content. Toutes les canonicals doivent pointer vers HTTPS.
Peut-on utiliser un certificat SSL gratuit comme Let's Encrypt ?
Absolument. Google ne fait aucune distinction entre un certificat gratuit et un certificat payant, tant qu'il est valide et correctement configuré.
Le mixed content empêche-t-il le bon référencement d'une page HTTPS ?
Oui, indirectement. Chrome bloque certaines ressources HTTP sur des pages HTTPS, ce qui peut casser l'affichage ou les fonctionnalités et dégrader l'expérience utilisateur — donc la Page Experience.
Faut-il migrer toutes les pages d'un coup ou progressivement ?
Idéalement d'un coup, avec une redirection 301 globale au niveau serveur. Une migration progressive complique la gestion des canonicals et des sitemaps, et peut créer des incohérences pour Google.

💬 Comments (0)

Be the first to comment.

2000 characters remaining
🔔

Get real-time analysis of the latest Google SEO declarations

Be the first to know every time a new official Google statement drops — with full expert analysis.

No spam. Unsubscribe in one click.