Site Running on HTTP & HTTPS

Hello Everyone,

My client's site is running on two headers:
1. HTTP
2. HTTPS

The client says that this is done for secure transaction reason.

Q1. Is Google viewing it as two duplicate sites?

Q2. Please recommend a way for resolving this.

Thanks in advance for all your help and advice!

1. Yes.

2. Use robots.txt file to disallow indexing the HTTPS version.

Only allow HTTPS for the parts of the site that really need to be secure. Stop access to secure URLs on the rest of the site.

If you use Apache webserver there are a number of ways to achieve this.