8

Our homepage has a 301 redirect from HTTP to HTTPS but all other pages on the site are on HTTP.

(1) Should the sitemap be located at HTTPS and is there any problem if we:

  • (2) include the HTTPS version of homepage (not including the HTTP homepage)
  • (3) include the HTTP of all other pages within the HTTPS sitemap

I have read conflicting information about including both HTTPS and HTTP in the same sitemap so any info is appreciated here.

3
  • 4
    Why are you using HTTPS for your homepage but nowhere else on your site? Nov 29, 2013 at 16:04
  • We have a log in form for users on the homepage so we wanted the page to have an SSL
    – user33692
    Nov 29, 2013 at 16:17
  • I'm curious where you have read it would be OK to include both HTTP and HTTPS URLs in the same sitemap?
    – MrWhite
    Nov 30, 2013 at 15:12

1 Answer 1

7

A single XML sitemap should not contain a mix of HTTP and HTTPS URLs (i.e. essentially different locations as far as the search engines are concerned). So, the sitemap located at http://example.com/Sitemap.xml should only contain URLs starting http://example.com/ and similar for the HTTPS sitemap.

From sitemaps.org:

Q: My site has both "http" and "https" versions of URLs. Do I need to list both?
No. Please list only one version of a URL in your Sitemaps. Including multiple versions of URLs may result in incomplete crawling of your site.

From GWT Sitemap Errors:

URL not allowed
https://www.example.com/ — it's using a different protocol (https rather than http)

So, you would seem to need 2 sitemaps. One for HTTPS and the other for HTTP. Although if you only have 1 URL in your HTTPS sitemap (your homepage!) then whether you need an HTTPS sitemap at all is debatable - although it could help with reporting in GWT.

To answer your specific questions...

(1) Should the sitemap be located at HTTPS and is there any problem if we:

Well, yes and no. You would need a sitemap at both, but primarily at HTTP.

(2) include the HTTPS version of homepage (not including the HTTP homepage)

Include the HTTPS version of the homepage in the HTTPS sitemap. You state you have a redirect to the HTTPS homepage, so there is no HTTP homepage. So, the HTTP homepage should not appear in any sitemap.

(3) include the HTTP of all other pages within the HTTPS sitemap

No. You would need a separate HTTP sitemap.

6
  • 1
    Thanks for that feedback w3d - that all makes sense. Just to clarify one last time: The HTTPS sitemap will just list our HTTPS Homepage. The HTTP sitemap will NOT include any reference to our homepage, since the homepage is located at HTTPS. If we decide not to submit a sitemap for HTTPS, do you imagine we'd run into any issue by not having our homepage included in a sitemap at all?
    – user33692
    Dec 3, 2013 at 12:00
  • Yes and yes. If you don't submit a sitemap for HTTPS (which would only contain your homepage) then I can't think of any issues that might arise from this. In GWT you can easily see how many pages from a particular sitemap have been indexed, but with just 1 page that is easy enough to find out by other means. At the end of the day, an XML sitemap is only advisory... Google will not necessarily index all pages in a sitemap and it will index pages that aren't included in a sitemap (if it finds them). Presumably all links to the homepage (on your site) include the HTTPS protocol?
    – MrWhite
    Dec 3, 2013 at 12:20
  • (A bit off topic...) There is the other curiosity (as mentioned in comments above) as to why only your homepage/login form submission is protected by SSL. Aren't you then subsequently sending your session cookie unencrypted?
    – MrWhite
    Dec 3, 2013 at 12:23
  • 1
    A small tweak: From Google's POV if you have both the HTTP & HTTPS versions of your site verified in the same Webmaster Tools account, you could submit a single Sitemap file for URLs from both "sites" (verification tells us that you own both, so you can do that). Dec 3, 2013 at 22:33
  • 1
    @w3d I don't know how other search engines handle this, since it's specific to Webmaster Tools verification. You can achieve the same by specifying the Sitemap file in the robots.txt file though (the same Sitemap URL in both example.com/robots.txt and example.com/robots.txt) -- that should be supported by all search engines. Dec 4, 2013 at 6:24

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.