No links to plain http
Why it matters
Sending a visitor from an https page to an http one drops them onto an unencrypted connection and usually raises a browser warning that reads as "this site is unsafe".
How to fix it
Point the links at the https version of the target, which nearly every site now serves.
Check a page for this