: HTTPS for website without form and login I would like to know if it is necessary, to avoid Google penalties and chrome warnings, by enabled HTTPS on a website that does not have a login page

@Megan663

Google just announced that ALL HTTP sites will be marked as insecure by Chrome starting in July 2018 with Chrome 68. Chrome will start showing warnings on your site unless it uses HTTPS, regardless of whether you have any form or ask users to input data.

Even today your HTTP site will be marked as insecure if users can type data into it (even into a search box). All HTTP sites are marked as insecure by Chrome in incognito mode.

There is also a Google search engine ranking factor tied so HTTPS. Google has said they give a very slight advantage to HTTPS sites over HTTP sites in the search results. The effect is so small, that migrating to HTTPS does not usually cause a ranking bump. In fact, in many cases there are temporary ranking drops as Google digests the redirects. I recommend introducing HTTPS and running it in parallel with HTTP initially. Set the canonical URLs to point to HTTPS during this period.

Vote Up Vote Down

@Samaraweera270

Since your site does not collect sensitive information Chrome will not display a warning about an unsecured connection.

As far as SEO goes a secured site tends ranks better than non-secured sites.

Consider securing your site anyways you can use Let's Encrypt

Let’s Encrypt is a free, automated, and open certificate authority (CA), run for the public’s benefit. It is a service provided by the Internet Security Research Group (ISRG).

Vote Up Vote Down