The Moz Q&A Forum

    • Forum
    • Questions
    • My Q&A
    • Users
    • Ask the Community

    Welcome to the Q&A Forum

    Browse the forum for helpful insights and fresh discussions about all things SEO.

    1. SEO and Digital Marketing Q&A Forum
    2. Categories
    3. Technical SEO Issues
    4. Adding https version of website: how best to redirect

    Adding https version of website: how best to redirect

    Technical SEO Issues
    18 3 340
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as question
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • bhsiao
      bhsiao last edited by

      If I have 4 versions of my site

      http://www
      http://
      https://www
      https://

      What is the best way to redirect without losing seo positions? i have been mainly using http://www but have recently added my ssl so https works also. I heard at Moz Con that I should get the https working.

      All of my marketing and ads are going to http://www

      301 redirect 3 of them? Which 3? If https is becoming important, should that be my main url? will it hurt my seo to switch?

      Thank you so much in advance!

      1 Reply Last reply Reply Quote 0
      • Guest
        Guest last edited by

        This post is deleted!
        1 Reply Last reply Reply Quote 0
        • bhsiao
          bhsiao last edited by

          Thanks James. I don't have a CMS. My pages are all hand coded html pages. (would dearly love to switch to a cms in the future since i have over 100 pages). Does your advice change in anyway?

          Guest BlueprintMarketing 2 Replies Last reply Reply Quote 0
          • Guest
            Guest @bhsiao last edited by

            This post is deleted!
            1 Reply Last reply Reply Quote 0
            • BlueprintMarketing
              BlueprintMarketing last edited by

              It does not matter if you have a CMS or not

              You need to redirect your entire site to whatever canonical you want considering use the www. it might be smart to just add the HTTPS and continue with the www. or

              Set you're preferred domain (www or non-www)

              USE:

              https://www.aleydasolis.com/htaccess-redirects-generator/ to make the code needed or use the code below to force HTTPS

              HTTP to HTTPS

              If your web server is running Apache, you can easily redirect all of your HTTP traffic to HTTPS by adding the following code to your .htaccess is the recommended method for redirecting a site running on Apache.

              <code class=" language-php">RewriteEngine On
              RewriteCond %{HTTPS} off
              RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]</code>
              

              <ifmodule mod_rewrite.c="">RewriteEngine On
              RewriteCond %{SERVER_PORT} !^443$
              RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]</ifmodule>

              If your web server is running Nginx, you can easily redirect all of you're HTTP traffic to HTTPS by adding the following code to you're Nginx config file. This is the recommended method for redirecting servers running on Nginx

              <code class=" language-php">server {
              listen 80;
              server_name domain.com www.domain.com;
              return 301 https://domain.com$request_uri;
              }</code>
              

              Set you're preferred domain (www or non-www)

              https://support.google.com/webmasters/answer/44231

              No-WWW

              <ifmodule mod_rewrite.c="">RewriteEngine On
              RewriteCond %{HTTP_HOST} ^www.example.com$
              RewriteRule (.*) https://example.com/$1 [R=301,L]</ifmodule>

              WWW

              <ifmodule mod_rewrite.c="">RewriteEngine On
              RewriteCond %{HTTP_HOST} ^example.com$
              RewriteRule (.*) https://www.example.com/$1 [R=301,L]</ifmodule>

              one of the best guides on how to add HTTPS

              https://www.keycdn.com/blog/http-to-https/

              https://kinsta.com/knowledgebase/redirect-http-to-https/

              https://www.sslshopper.com/apache-redirect-http-to-https.html

              The following will differ from platform to platform. In this example, we will show you how to update your URL. We recommend using a free tool from Interconnect IT called “Database search and replace script in php.” You could run update queries yourself, but there are a lot of tables and metadata fields you will probably miss unless you have an exact list.

              We recommend doing dis on a dev server and moving it back, or at least backing up you're database first to be safe as this script does grab your local database credentials. Simply drop their program into the root of your site via FTP. Then browse to it in your browser. (We named our folder “search-replace-db”)

              You can tan insert what you want to replace. Make sure you enter all of the formats you have mixed and matched over the years such as:

              • http://mydomain.com to https://mydomain.com

              • http://www.mydomain.com to https://www.mydomain.com

              • https://blog.hubspot.com/blog/tabid/6307/bid/7430/what-is-a-301-redirect-and-why-should-you-care.aspx

              • https://moz.com/learn/seo/redirection

              • https://yoast.com/which-redirect/

              • https://support.google.com/webmasters/answer/93633?hl=en

              Check it with

              Redirect mapper | A tool that checks redirects from different versions of ...

              <cite class="_Rm">https://varvy.com/tools/redirects/</cite>

              Hope this helps,

              Tom

              Guest 1 Reply Last reply Reply Quote 1
              • Guest
                Guest @BlueprintMarketing last edited by

                This post is deleted!
                BlueprintMarketing 2 Replies Last reply Reply Quote 0
                • BlueprintMarketing
                  BlueprintMarketing @Guest last edited by

                  James,

                  I don't want to be rude saying this but it sounds like you're telling me the basics of search engine optimization redirects and telling me I did not include it in my response?

                  I appreciate you pointing out how you read my comment and definitely appreciate your feedback. But if it came across as me telling them to create infinite redirects I am asking you to please read it again.  don't you believe I read the whole post because I'm not talking about the proper protocol?

                  HTTPS is known as TLS / SSL or Hyper Text Transfer Protocol Secure (HTTPS)

                  A lot of the terminology you're using is not relevant to the question because once again I provided with them with the code to actually implement this check it for problems and fix what was broken I don't know exactly why you chose to tell me I did it incorrectly but if you would like to outline exactly how I did this incorrectly I would be more than happy to read it as I always open to constructive conservativism

                  "http://www
                  http_://_
                  https://www
                  https://

                  What is the best way to redirect without losing SEO positions?"

                  **My answer was a use www. with HTTPS **

                  **You need to redirect you're an entire site to whatever canonical your considering use the www. it might be smart to just add the HTTPS://www. and continue with the www. **

                  Set you're preferred domain (www or non-www) as I do not have their URL I cannot look at rather or not they have a 301 redirects chained as you seem to be implying? But don't worry I took care of it at the end I said please check all this with this tool https://varvy.com/tools/redirects/  that would show any redirects that were forming a redirect chain.

                  James, I apologize if it was hard for you to follow I thoroughly believe that I gave them everything that they needed to complete the project and I am always here to answer questions.

                  If you are asked by anybody that present you with four URLs which one they should go with and how they should go about redirecting it I would hope it you would not write what you had written to me.

                  I am also the only one who gave third-party references and tools to accomplish this task.

                  I wish you the very best,

                  Tom

                  1 Reply Last reply Reply Quote 0
                  • BlueprintMarketing
                    BlueprintMarketing @Guest last edited by

                    Also James telling somebody to add HSTS with preload is extremely dangerous unless they know without a doubt that their redirects are set up properly it will keep them in the browser improperly for up to six months your advice is to simply add H STS with preload and it was abundantly clear that this person knew that the four URLs were what was to choose from. I included the completed 2 to 5-page references for a complete package.

                    "After a period of time  - and rankings seem ok . - you can implement oscp stapling and some server wide HSTS.   and submit to teh preload directory. "

                    For the record do not employ HSTS with preload until you have determined that all your subdomains if you have any, are going to have HSTS in addition that all your redirects are completely perfect and the way you want them. I would check using a tool called screaming frog Seo spider or my personal favorite deepcrawl.com

                    **Your rankings could be just fine and it would not necessarily show that you have a redirect chain permanently embedded for six months in your set up in less you check it first. **

                    "OCSP stapling is an alternative approach to the original Online Certificate Status Protocol (OCSP) for determining whether an SSL certificate is valid or not. It does this by allowing the web server to query the OCSP responder (a certificate authority’s server dat listens for OCSP requests) and then caches the response__. This allows the web server to check the validity of its certificates and eliminates the need for the client to contact the certificate authority"

                    OCSP can and should be implemented at the time of employing the SSL certificate

                    Tom

                    1 Reply Last reply Reply Quote 1
                    • BlueprintMarketing
                      BlueprintMarketing @bhsiao last edited by

                      Honestly, the way you set up a 301 is much more dependent on the server like Apache and Nginx then it is on a CMS

                      if you are looking for one I would recommend using WordPress or Drupal for a CMS  If you're thinking of switching  WordPress is much more user-friendly slightly quicker and many many more developers are available to help with it.

                      Tom

                      1 Reply Last reply Reply Quote 0
                      • BlueprintMarketing
                        BlueprintMarketing last edited by

                        See

                        Aleyda Solis The HTTP to HTTPs Migration Checklist in Google Docs to Share, Copy & Download & the SEMrush guide

                        1. https://www.aleydasolis.com/en/search-engine-optimization/http-https-migration-checklist-google-docs/
                        2. https://docs.google.com/spreadsheets/d/1XB26X_wFoBBlQEqecj7HB79hQ7DTLIPo97SS5irwsK8/edit#gid=1975121463
                        3. https://www.semrush.com/blog/http-to-https-a-complete-guide-to-securing-your-website-semrushchat/

                        Hope this helps,

                        Tom

                        bhsiao 1 Reply Last reply Reply Quote 1
                        • bhsiao
                          bhsiao @BlueprintMarketing last edited by

                          Thank you

                          1 Reply Last reply Reply Quote 1
                          • bhsiao
                            bhsiao last edited by

                            I may have made a mess for myself. I turned on the ssl a couple of weeks ago (2-3) but didn't do the other things first. Should i remove the ssl from my site until I go through the checklist? I am starting to panic, hoping i have not gotten myself into big trouble.

                            My internal links, ads, canonical urls all still use http.

                            BlueprintMarketing 2 Replies Last reply Reply Quote 0
                            • BlueprintMarketing
                              BlueprintMarketing @bhsiao last edited by

                              Definitely don’t panic and you’re not in trouble. What I would do for his run a search and replace on the URL‘s if you’re running a non CMS site  find a search & replace CLI or script that works with the code you’re site was made with if you’re hosting company is  managing the site ask them for help

                              run the search & replace to fix the URL‘s

                              one way is to just add CloudFlare.com for free and use the felxable cert

                              if your on a CMS like  wordpress you can use a plugin like better search & replace

                              1 Reply Last reply Reply Quote 1
                              • BlueprintMarketing
                                BlueprintMarketing @bhsiao last edited by

                                If it’s hand coded use a text editor & search for http replac with https if using Dreamweaver it has a full site wide search and replace.

                                bhsiao 1 Reply Last reply Reply Quote 0
                                • bhsiao
                                  bhsiao @BlueprintMarketing last edited by

                                  So you recommend just going forward with the https switch even though I have not done all the things on the checklist?

                                  BlueprintMarketing 1 Reply Last reply Reply Quote 0
                                  • BlueprintMarketing
                                    BlueprintMarketing @bhsiao last edited by

                                    Did you allready 301 the site to https?

                                    if so I would updat the URLs &  then follow the instructions

                                    if https is in google index I would fix it with a search & replace or CloudFlare (the 1 thing on the list is this url https://raventools.com/blog/free-ssl-http2/ use it if it’s something you want to have do the work

                                    bhsiao 1 Reply Last reply Reply Quote 1
                                    • bhsiao
                                      bhsiao @BlueprintMarketing last edited by

                                      I have not already 301'd the site to https. But either url works since I turned on the ssl at my host.

                                      I will check into the Cloudflare.

                                      BlueprintMarketing 1 Reply Last reply Reply Quote 1
                                      • BlueprintMarketing
                                        BlueprintMarketing @bhsiao last edited by

                                        I see you added the certificate but you didn’t force https

                                        flow the guide and make sure it  all 4 URLs point to the (redirects) to https://www

                                        you can do it in no time with cloudflare then check it with

                                        https://varvy.com/tools/redirects/

                                        hope that helps,

                                        tom

                                        1 Reply Last reply Reply Quote 0
                                        • 1 / 1
                                        • First post
                                          Last post
                                        • Do you still loose 15% of value of inbound links when you redirect your site from http to https (so all inbound links to http are being redirected to https version)?
                                          LoganRay
                                          LoganRay
                                          0
                                          5
                                          74

                                        • Redirects - How Best to do this ?
                                          Vizergy
                                          Vizergy
                                          0
                                          5
                                          116

                                        • Website redirects
                                          spackle
                                          spackle
                                          0
                                          5
                                          142

                                        • Two companies merge: website A redirect 301 to website B. Problems?
                                          Mike_c
                                          Mike_c
                                          0
                                          4
                                          1.5k

                                        • I'm redesigning a website which will have a new URL format. What's the best way to redirect all the old URLs to the new ones? Is there an automated, fast way to do this?
                                          GregFindley.co.uk
                                          GregFindley.co.uk
                                          0
                                          2
                                          303

                                        • Best method of redirecting http to https on homepage
                                          Dr-Pete
                                          Dr-Pete
                                          0
                                          7
                                          1.0k

                                        • Redirect or not to redirect
                                          AlanMosley
                                          AlanMosley
                                          0
                                          7
                                          458

                                        • Https redirect
                                          KeriMorgret
                                          KeriMorgret
                                          0
                                          5
                                          1.1k

                                        Get started with Moz Pro!

                                        Unlock the power of advanced SEO tools and data-driven insights.

                                        Start my free trial
                                        Products
                                        • Moz Pro
                                        • Moz Local
                                        • Moz API
                                        • Moz Data
                                        • STAT
                                        • Product Updates
                                        Moz Solutions
                                        • SMB Solutions
                                        • Agency Solutions
                                        • Enterprise Solutions
                                        • Digital Marketers
                                        Free SEO Tools
                                        • Domain Authority Checker
                                        • Link Explorer
                                        • Keyword Explorer
                                        • Competitive Research
                                        • Brand Authority Checker
                                        • Local Citation Checker
                                        • MozBar Extension
                                        • MozCast
                                        Resources
                                        • Blog
                                        • SEO Learning Center
                                        • Help Hub
                                        • Beginner's Guide to SEO
                                        • How-to Guides
                                        • Moz Academy
                                        • API Docs
                                        About Moz
                                        • About
                                        • Team
                                        • Careers
                                        • Contact
                                        Why Moz
                                        • Case Studies
                                        • Testimonials
                                        Get Involved
                                        • Become an Affiliate
                                        • MozCon
                                        • Webinars
                                        • Practical Marketer Series
                                        • MozPod
                                        Connect with us

                                        Contact the Help team

                                        Join our newsletter
                                        Moz logo
                                        © 2021 - 2026 SEOMoz, Inc., a Ziff Davis company. All rights reserved. Moz is a registered trademark of SEOMoz, Inc.
                                        • Accessibility
                                        • Terms of Use
                                        • Privacy