So all of a sudden, searches for our site "radiotuna" give out the result as an HTTPS link.

https://www.google.com/?q=radiotuna#hl=en&safe=off&output=search&sclient=psy-ab&q=radiotuna&oq=radiotuna&gs_l=hp.12...0.0.0.3499.0.0.0.0.0.0.0.0..0.0.les%3B..0.0...1c.LnOvBvgDOBk&pbx=1&bav=on.2,or.r_gc.r_pw.r_qf.&fp=177c7ff705652ec3&biw=1366&bih=602

We only use https for the download of two specific files (these urls are resources used for autoupdate functionality of an app we distribute). All other parts of the site should be served over http. We wouldn't like to see any other traffic over https, nor any of our site links to appear in search engines as https.

I'd like to address this issue. It seems that the following solutions are available:

hand out an https specific robots.txt as such:

User-agent: *
Disallow: /

and/or at app-level, 301 permanent redirect all requests (except the two above) to HTTP if they come in as HTTPS.

My concern with the robots method is that, say (for some reason) google decided not to index http pages, disallowing https pages might mean that google has nothing left to index with disastrous consequences for our ranking.

This means I'm inclined to go with a 301 redirect.

Any thoughts?