HTTPS 与安全信号
The padlock is table stakes for rankings, browsers and user trust. 影响项: SEO
Security as a visibility signal
HTTPS has been a ranking signal for years, and browsers now actively warn on plain HTTP pages and mixed content. One insecure script on a secure page can break the padlock and, with it, visitor trust. HSTS tells browsers to never even try HTTP again.
Security failures also get sites de-listed abruptly: a hacked page injected with spam can trigger warnings in results within days.
What this site measures
Whether the site serves over HTTPS, whether HTTP redirects to HTTPS, the HSTS header, mixed-content references, declared charset, and modern protocol support (HTTP/2 or newer).
How to improve
- Certificates are free (Let's Encrypt) and automatic on most modern hosting.
- 301-redirect all HTTP URLs to their HTTPS twins, sitewide.
- Fix mixed content: every script, style, image and frame loads over https.
- Add HSTS once you're confident HTTPS is stable everywhere.
- Keep platforms and plugins updated; most hacks exploit known old bugs.
Common mistakes
A valid certificate but no redirect, so both versions live in parallel. Hardcoded http:// image URLs from an old migration. Letting the certificate lapse on the weekend nobody's watching.
查看您的网站在此项的表现: 为其评分，每项检测均展示其依据。
为我的网站评分 →更多指南
打造易于被发现的网站
Starting from zero? The platform choices, pages and foundations that decide whether your site is visible from day one.
阅读完整指南 →按正确顺序持续优化您的网站
The improvement playbook: what to fix first, what compounds, and how to verify each step actually landed.
阅读完整指南 →GEO、AEO 与 LLMO：全面解读这套新兴术语体系
The three terms you'll hear most for AI-era optimization: what each means, how they differ, and what to actually do about them.
阅读完整指南 →搜索排名机制说明
Crawling, indexing, ranking, and which of the three you actually control.
阅读完整指南 →AI 与答案引擎（AIO）
A growing share of questions never reach a results page; an assistant answers them.
阅读完整指南 →标题与 meta 描述
Your headline and your sales pitch in every results page and AI citation.
阅读完整指南 →