What it is
If the insecure version of a URL does not redirect to HTTPS, I end up with two versions of every page and a security warning for users. Every http URL should 301 to its https equivalent. Insecure URLs don’t redirect to secure.
Why does http→https redirect missing matter for AI search?
Duplicate HTTP/HTTPS URLs and a weaker trust/ranking position.
How do you fix it?
301 all HTTP to HTTPS; set canonical to HTTPS.
How do you find it on your site?
- Run curl -I http://yourdomain.com/page and check for a 301 to the https version.
- Test several URLs across the site, not just the homepage.
- Confirm there is a site-wide rule rather than scattered per-page redirects.
- Check HSTS is set so browsers prefer https automatically.
Which ranking and citation factors does it touch?
HTTPS is a confirmed ranking signal, and duplicate http and https URLs split signals. A clean site-wide redirect consolidates them.
What is the impact?
Medium-high. Direct (HTTPS is a ranking signal).
What is the evidence?
HTTPS is a ranking signal; consolidate to it. Google Search Central, Secure your site with HTTPS
Frequently asked questions about http→https redirect missing
What does "HTTP→HTTPS redirect missing" mean?
Insecure URLs don’t redirect to secure.
How do you fix hTTP→HTTPS redirect missing?
301 all HTTP to HTTPS; set canonical to HTTPS.