Alexa top 50 https results

Posted June 26, 2014 by David Redekop to Security

We tested the Alexa Global Top 50 sites for https-only functionality and our results are captured in this Google Sheet available to the public:

https://docs.google.com/spreadsheets/d/1HirCBS8bK89-jPrLc2cmru48R-3s9mUTJVwni3DO_Sw/pubhtml

Some interesting takeaways:

  • 29 out of 50 (58%) worked perfectly over https
  • Google (internationally) consistently offers SSL everywhere, and in some countries like US and Canada, even defaults to SSL on its own
  • It appears that every Alexa-ranked company from China offers NO SSL, which facilitates gov censorship
  • Amazon, Yandex, Instagram, Ebay, Craigslist all force http (as does OpenDNS non-dashboard use), likely due to mixed content