Defaults.Exposed

Defaults.ExposedMethodologyv7 registry › HTTPS available

HTTPS available

Methodology v7 · canonical ID https-available · TLS & Certificates · scored · census as of July 28, 2026

Without it, browsers warn visitors "Not secure" and they leave.

Definition

Canonical IDhttps-available
CategoryTLS & Certificates
Grade impactScored — counts toward the grade
PassThe site serves content over HTTPS (TLS handshake completes and a response is returned).
FailThe site is reachable over plain HTTP only, or HTTPS connections fail.
Example (passing)https://example.com/ → HTTP 200 over TLS

No-data rule: when this check couldn't be determined for a domain (timeout, SERVFAIL, redacted source) it returns N/A and is excluded from that domain's scoring denominator — "couldn't determine" is never counted as a failure. "Determined absent" is a real fail.

Prevalence across the census

76.3% of graded domains serve over HTTPS (210,439,319 of 275,666,275, as of July 28, 2026).

Census denominator: 275,666,275 graded domains. Aggregates only — never an individual domain's result.

Fix it

Plain-English impact, cost of ignoring it, and step-by-step remediation: defaults.exposed/en/fix/https

Cite this check

Defaults.Exposed, "HTTPS available (https-available)", Grading Methodology v7 (census as of July 28, 2026). https://defaults.exposed/methodology/v7/https-available

Permalink: https://defaults.exposed/methodology/v7/https-available · All 34 checks: v7 registry · Machine-readable: checks.json · Licence: open data