Switching from Http to Https, but what about images and image link juice?
-
Hi Ya'll.
I'm transitioning our http version website to https. Important question:
Do images have to have 301 redirects? If so, how and where?
Please send me a link or explain best practices.
Best,
Shawn
-
Shawn124, whenever you move from HTTP to HTTPs, you'll need to set up the 301 permanent redirects for pages on the site only. The other elements, such as images, JavaScript (if they're external files), and .CSS files will need to be changed only in the code so that they reference the new HTTPs URLs, and not HTTP.
If you load an HTTP element (such as an image that uses the full URL in it's reference rather than the image filename only) on an HTTPs URL, then the browser will give you an error. So generally you need to do two things:
-
set up 301 Permanent Redirect for the page URLs.
-
search the entire website for all references to HTTP and change them to HTTPs (unless you're linking out to an external site).
If the site is in WordPress, you can use the Search and Replace plugin to replace it all at once in the database.
-
-
If you 301 redirect all HTTP URLs to HTTPS On the origin server,
To Move the origin server the HTTP to HTTPS On the origin server your redirects on your images will follow
#1
NGINX
Add the following to your Nginx config.
server { listen 80; server_name domain.com www.domain.com; return 301 https://domain.com$request_uri; }
Apache
Add the following to your
.htaccess
file.RewriteEngine On RewriteCond %{HTTPS} off RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]
(TOOL Apache htaccess to NGINX config tool https://winginx.com/en/htaccess)
#2
Search and replace the old HTTP:// URLs to New HTTPS://
http://mydomain.com
tohttps://mydomain.com
http://www.mydomain.com
tohttps://www.mydomain.com
Use CLI or https://interconnectit.com/products/search-and-replace-for-wordpress-databases/
#3
Alert Google that you are migrating to HTTPS https://www.google.com/webmasters/tools/home?hl=en
You will have no issue with your images.
Your link juice will flow as it did before because Google is no longer penalizing multiple redirects (So they SAY BUT don't over use redirects) keep them to a minimum, please.
https://www.deepcrawl.com/knowledge/best-practice/the-zen-guide-to-https-configuration/
https://www.deepcrawl.com/knowledge/best-practice/https-dilemma-security-seo/
#4
If on WordPress using proxy or just have insecure content use
Really Simple SSL: https://wordpress.org/plugins/really-simple-ssl/
Your insecure content is fixed by replacing all HTTP:// URLs with HTTPS://, except links to other external domains. Everything is done dynamically.
If using a Photos on a WAF or Pull CDN Force HTTPS
Connections#5
For example, if you're using a CloudFlare for Photos? You would use page rules to force a 301 redirect HTTPS
https://tools.keycdn.com/curl see #9 in https://www.maxcdn.com/one/tutorial/edge-rules-recipes/
#6
301's will not lose link juice see:
https://moz.com/blog/301-redirection-rules-for-seo
#7
Test using https://www.deepcrawl.com/ & or https://www.screamingfrog.co.uk/seo-spider/
(For a larger picture of the image below about redirect rule changing and link juice click on this URL http://i.imgur.com/vqyT6gm.jpg )
#8
If still needing tips or help read below.
Do images have to have 301 redirects? Yes
Citing:
http://searchengineland.com/http-https-seos-guide-securing-website-246940
"Making the switch from HTTP to HTTPS
- Start with a test server. This is important because it lets you get everything right and test without screwing it up in real time. Even if you are doing the switch without a test server, there’s almost nothing you can do that you can’t recover from, but it’s still best practice to have a plan and have everything tested ahead of time.
- Crawl the current website so that you know the current state of the site and for comparison purposes.
- Read any documentation regarding your server or CDN for HTTPS. I run into lots of fun CDN issues, but it can also be straightforward.
- Get a security certificate and install on the server. This will vary depending on your hosting environment and server setup too much for me to go into details, but the process is usually well-documented.
- Update references in content. This can usually be done with a search-and-replace in the database. You’ll want to update all references to internal links to use HTTPS or relative paths.
- Update references in templates. Again, depending on how you deploy, this might be done with Git or simply Notepad++, but you’ll want to make sure references to scripts, images, links and so on are either using HTTPS or relative paths.
- Update canonical tags. Most CMS systems will take care of this for you when you make the switch, but double-check, because that’s not always the case.
- **Update hreflang tags **if your website uses them, or any other tags such as OG tags for that matter. Again, most CMS systems will take care of this, but it’s best to QA it just in case.
- Update any plugins/modules/add-ons to make sure nothing breaks and that nothing contains insecure content. I commonly see internal site search and forms missed.
- CMS-specific settings may need to be changed. For major CMS systems, these are usually well-documented in migration guides.
- Crawl the site to make sure you didn’t miss any links and nothing is broken. You can export any insecure content in one of the Screaming Frog reports if this is the crawler you are using.
- Make sure any external scripts that are called support HTTPS.
- Force HTTPS with redirects. This will depend on your server and configuration but is well-documented for Apache, Nginx, and IIS.
- Update old redirects currently in place (and while you’re at it, take back your lost links from redirects that haven’t been done over the years). I mentioned during the Q&A portion of the Technical SEO Panel at SMX West that I’ve never had a site drop in rankings or traffic when switching to HTTPS, and a lot of people questioned me on this. Due diligence on redirects and redirect, chains are likely the difference, as this is what I see messed up the most when troubleshooting migrations.
- Crawl the old URLs for any broken redirects or any redirect chains, which you can find in a report with Screaming Frog.
- **Update sitemaps **to use HTTPS versions of the URLs.
- **Update your robots.txt file **to include your new sitemap.
- Enable HSTS. This tells the browser always to use HTTPS, which eliminates a server-side check and makes your website load faster. This can also cause confusion at times, since the redirect will show as 307. It could have a 301 or a 302 behind it, though, and you may need to clear your browser cache to see which.
- Enable OCSP stapling. This enables a server to check if a security certificate is revoked instead of a browser, which keeps the browser from having to download or cross-reference with the issuing certificate authority.
- Add HTTP/2 support.
- Add the HTTPS version of your site to all the search engine versions of webmaster tools that you use and load the new sitemap with HTTPS to them. This is important, as I’ve seen traffic drops misdiagnosed because they saw the traffic in the HTTP profile drop, when the traffic in reality moved to the HTTPS profile. Another note for this is that you do not need to use the Change of Address Tool when switching from HTTP to HTTPS.
- Update your disavow file if you had one for the HTTPS version.
- Update your URL parameter settings if you had these configured.
- Go live!
- In your analytics platform, make sure you update the default URL if one is required to ensure that you are tracking HTTPS properly, and add notes about the change so that you know when it occurred for future reference.
- Update your social share counts. There’s a lot of gotchas to this, in that some of the networks will transfer the counts through their APIs, while others will not. There are already guides for this around if you are interested in keeping your share counts.
- Update any paid media, email or marketing automation campaigns to use the HTTPS versions of the URLs.
- Update any other tools such as A/B testing software, heat maps and keyword tracking to use the HTTPS versions of the URLs.
- Monitor everything during the migration and check, double-check and triple-check to make sure everything is going smoothly. There are so many places where things can go wrong, and it seems like there are usually several issues that come up in any switch to HTTPS.
One question I’m often asked is if incoming links should be cleaned up. This is a tremendous amount of outreach and effort. If you have time, then sure; but most likely you’re busy with other things, and I don’t feel it’s necessary. However, you should update the links on any properties that you control, such as social profiles."
** you asked for the best links here are what you need**
- https://yoast.com/dev-blog/move-website-https-ssl/
- https://www.semrush.com/blog/how-to-survive-a-website-migration-semrushchat/?l=en
- https://www.digitalocean.com/community/questions/how-to-redirect-all-traffic-to-https-non-www
- https://moz.com/community/q/301-redirect-all-pictures-when-moving-to-a-new-site
- Link juice
** examplesI have put a lot more below**
- https://www.digitalocean.com/community/questions/how-to-redirect-all-traffic-to-https-non-www
- https://kinsta.com/knowledgebase/redirect-http-to-https/
- https://bjornjohansen.no/redirect-to-https-with-nginx
Unless you have to modify whatever system it is powering them, do you have a CDN? Or using something like AWS S3?
If so your images should move with the rest of the site. If you're posting them on a content delivery network or an AWS S3 whatever it is you must redirect that as well.
- https://yoast.com/dev-blog/move-website-https-ssl/
- https://support.google.com/webmasters/answer/83106?hl=en&ref_topic=6029673
- **https://moz.com/learn/seo/redirection **
- https://moz.com/community/q/301-redirect-all-pictures-when-moving-to-a-new-site
juice will not be lost long is you tell Google your moving the site see the URL below for how to redirect
Some of the systems will have buttons where you'd just click HTTPS others will require you to put the code into the system. I have posted the code below for Nginx as well as Apache.
Redirect from HTTP to https
This last bit will help you tremendously when you’ve not updated every single link on your site yet. You can just add a straight server level redirect from HTTP to https. In NGINX, we do this by having two servers defined in our config, the “right” one; that listens on port 443 and a simple one that listens on port 80 (standard HTTP) and has just this:
server {
listen 80;
server_name yoursite.com www.yoursite.com;
return 301 https://yoursite.com$request_uri;
}This seems to be the fastest way of doing this in NGINX, in Apache you’d do something like this:
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]- Tools
- http://www.aleydasolis.com/htaccess-redirects-generator/nonwww-to-www/
- https://yoast.com/research/permalink-helper.php
- http://www.contentforest.com/seo-tools/url-redirect-generator
- https://donatstudios.com/RewriteRule_Generator
- http://www.rapidtables.com/web/tools/redirect-generator.htm
How to force SSL with. htaccess
If you want to force your entire website to go through https, you can add these rules to your .htaccess file:
| |
RewriteEngineOnRewriteCond%{SERVER_PORT}80RewriteRule^(.*)$https://yourdomain.com/$1 [R,L]
|
If your site is in a subfolder, use this code:
| |
RewriteEngineOnRewriteCond%{SERVER_PORT}80RewriteCond%{REQUEST_URI}folderRewriteRule^(.*)$https://yourdomain.com/folder/$1 [R,L]
|
Only replace yourdomain.com with your actual domain name.
Test with
- https://varvy.com/tools/redirects/
- https://varvy.com/pagespeed/hsts.html
- https://varvy.com/mobile/mobile-redirects.html
- http://searchengineland.com/http-https-seos-guide-securing-website-246940
Hope this helps,
Thomas
Got a burning SEO question?
Subscribe to Moz Pro to gain full access to Q&A, answer questions, and ask your own.
Browse Questions
Explore more categories
-
Moz Tools
Chat with the community about the Moz tools.
-
SEO Tactics
Discuss the SEO process with fellow marketers
-
Community
Discuss industry events, jobs, and news!
-
Digital Marketing
Chat about tactics outside of SEO
-
Research & Trends
Dive into research and trends in the search industry.
-
Support
Connect on product support and feature requests.
Related Questions
-
Google Image Search - Is there a way to influence the related icons at the top of the image search results?
Google recently added related icons at the top of the image search results page. Some of the icons may be unrelated to the search. Are there any best practices to influence what is positioned in the related image icons section? Thank you.
Intermediate & Advanced SEO | | JaredBroussard1 -
Site Migration Question - Do I Need to Preserve Links in Main Menu to Preserve Traffic or Can I Simply Link to on Each Page?
Hi There We are currently redesigning the following site https://tinyurl.com/y37ndjpn The local pages links in the main menu do provide organic search traffic. In order to preserve this traffic, would be wise to preserve these links in the main menu? Or could we have a secondary menu list (perhaps in the header or footer), featured on every page, which links to these pages? Many Thanks In Advance for Responses
Intermediate & Advanced SEO | | ruislip180 -
Does Navigation Bar have an effect on the link juice and the number of internal links?
Hi Moz community, I am getting the "Avoid Too Many Internal Links" error from Moz for most of my pages and Google declared the max number as 100 internal links. However, most of my pages can't have internal links less than 100, since it is a commercial website and there are many categories that I have to show to my visitors by using the drop down navigation bar. Without counting the links in the navigation bar, the number of internal links is below 100. I am wondering if the navigation bar links affect the link juice and counted as internal links by Google. The Same question also applies to the links in the footer. Additionally, how about the products? I have hundreds of products in the category pages and even though I use pagination I still have many links in the category pages (probably more than 100 without even counting the navigation bar links). Does Google count the product links as internal links and how about the effect on the link juice? Here is the website if you want to take a look: http://www.goldstore.com.tr Thank you for your answers.
Intermediate & Advanced SEO | | onurcan-ikiz0 -
Internal nofollow links
Hello, We have a blog and at the end each blog post (and from the sidebar) we link to one main product page (tagged with a particular query string). Now Google will see from every blog post all of these internal links pointing back to this page. Do you think this would cause a problem and that these links should be nofollowed? I think Google will kind of detect that these is kind of a "navigation" as the code will be the same across all webpages. Most of all, doing them nofollow I think it is worse because it may trigger some sort of pagerank sculpting algo filter, if it still exists. Thanks, Conrad
Intermediate & Advanced SEO | | conalt0 -
Link building strategy
Hello Moz Community, For the last couple of months we have been trying to improve our ranking in Google UK for the keyword "church candles" http://www.wattsandco.com/church-supplies/church-candles.html We’ve been contacting relevant interiors/lifestyle blogs to feature our candles including anchor text linking back to our page. Our anchor text has been predominately our brand (Watts & Co) but also other key search terms (Watts and Co church candles, Watts and Co pillar candles). We have been tracking our ranking for the keyword “Church candles” using the Moz “ Rank Tracker” and we started on position 15 in Google UK. We went up to 12 briefly before moving down every week to 15, 17, 19 and 22. We checked today and we have moved back up slightly to 19. Our progress seems to be a bit slow and inconsistent. We wanted to reach out for any advice on how we can move up? If there was any way we can improve our strategy? Here’s the links we have built so far: http://nostalgiecat.blogspot.co.uk/2015/10/what-autumn-means-to-me.html http://blog.pollyrowan.com/2015/10/5-small-ways-to-decorate-your-home-that.html http://www.happyhomebird.com/2015/10/watts-co-candles-for-cosy-autumn-home.html http://www.frolic-blog.com/2015/10/beeswax-candles-for-fall/ http://hisforhomeblog.com/lighting/watts-co-church-candles/#axzz3qhqN1wzA http://lorilangille.blogspot.co.uk/2015/11/sponsored-post-watts-and-co.html http://www.californiahomedesign.com/product-finds/waxing-poetic-must-have-candles Thanks so much!
Intermediate & Advanced SEO | | roberthseo0 -
Content Internal Linking ?
Should we internally link new content to old content using anchor tags (keywords) related to pages from all new blogposts or should be keep rotating the blogposts like link from some blog posts & not from others. What ratio should we maintain. Right now i keep 2 links maximum from a 300 words posts or 3 in 500 words posts maximum. But linking from each new blog posts will be good?
Intermediate & Advanced SEO | | welcomecure0 -
Competing with Spammy Links
One of my client's leading competitors is well stacked in terms of rank/authority. PA: 61, DA: 53. However, in OSE I estimate that +/- of all links on the first page are from sites such as "http://www.shopp011.freedownloadhub.com/Link-Exchange/browse.php?id=17", "http://www.shopp002.freedownloadhub.com/Link-Exchange/browse.php?id=17", "http://www.shopp029.freedownloadhub.com/Link-Exchange/browse.php?id=17". Personally, I would consider this to be a little spammy. However, I admit that I could be wrong. What's the best approach when trying to take on a competitor like this? Wait it out and tell my client to keep blogging/selling as per the schedule until Google pics up on these links?
Intermediate & Advanced SEO | | ShippingContainer0 -
First Link Priority question - image/logo in header links to homepage
I have not found a clear answer to this particular aspect of the "first link priority" discussion, so wanted to ask here. Noble Samurai (makers of Market Samurai seo software) just posted a video discussing this topic and referencing specifically a use case example where when you disable all the css and view the page the way google sees it, many times companies use an image/logo in their header which links to their homepage. In my case, if you visit our site you can see the logo linking back to the homepage, which is present on every page within the site. When you disable the styling and view the site in a linear path, the logo is the first link. I'd love for our first link to our homepage include a primary keyword phrase anchor text. Noble Samurai (presumably seo experts) posted a video explaining this specifically http://www.noblesamurai.com/blog/market-samurai/website-optimization-first-link-priority-2306 and their suggested code implementations to "fix" it http://www.noblesamurai.com/first-link-priority-templates which use CSS and/or javascript to alter the way it is presented to the spiders. My web developer referred me to google's webmaster central: http://www.google.com/support/webmasters/bin/answer.py?answer=66353 where they seem to indicate that this would be attempting to hide text / links. Is this a good or bad thing to do?
Intermediate & Advanced SEO | | dcutt0