---
title: "Page served over plain HTTP (seo/not-https)"
description: "seo/not-https: Secure serving is a page experience signal and browsers mark HTTP pages as not secure."
canonical: https://void-design.vercel.app/rules/seo/not-https
lastModified: 2026-09-16
---

# Page served over plain HTTP

`seo/not-https` · severity **warn** · category SEO · detected by `void seo` and `void audit`

## Why it matters

Secure serving is a page experience signal and browsers mark HTTP pages as not secure.

## How to fix it

Serve over HTTPS, redirect http:// to https:// in one 301/308 hop, and send Strict-Transport-Security.

## References

- https://developers.google.com/search/docs/appearance/page-experience

## More seo rules

`void seo` reports 60 rules in this category. What search engines need from the raw response: status codes, titles and descriptions in <head>, self-referencing canonicals, one h1, crawlable links, Open Graph, icons, robots.txt and a sitemap with real dates.

- `robots-snippet-restricted` nosnippet or a very low max-snippet limits previews — [seo/robots-snippet-restricted](https://void-design.vercel.app/rules/seo/robots-snippet-restricted)
- `soft-404` Missing page returns HTTP 200 (soft 404) — [seo/soft-404](https://void-design.vercel.app/rules/seo/soft-404)
- `html-too-large` Uncompressed HTML is over Googlebot's 2 MB fetch limit — [seo/html-too-large](https://void-design.vercel.app/rules/seo/html-too-large)
- `rsc-payload-ratio` Inline RSC flight payload dominates the HTML — [seo/rsc-payload-ratio](https://void-design.vercel.app/rules/seo/rsc-payload-ratio)
- `origin-redirects` http:// or www/apex variant doesn't redirect to the canonical origin in one hop — [seo/origin-redirects](https://void-design.vercel.app/rules/seo/origin-redirects)
- `html-lang` <html lang> missing or not a valid BCP 47 tag — [seo/html-lang](https://void-design.vercel.app/rules/seo/html-lang)
- `viewport` Viewport meta missing, not device-width, or blocks zoom — [seo/viewport](https://void-design.vercel.app/rules/seo/viewport)
- `charset` Character encoding not declared early — [seo/charset](https://void-design.vercel.app/rules/seo/charset)

Detected by `void seo` and `void audit`. Explain it in a terminal: `void rules seo/not-https`
