In 2019, I removed my old HTTP site (300k URLs), and I consolidated some contents. This is,
http://example.com/photos/my-product-name (no HTTPS) -301-> https://example.com/product/my-product-name#photos (HTTPS and consolidated)
http://example.com/product/my-product-name (no HTTPS) -301-> https://example.com/product/my-product (HTTPS and consolidated)
However, five years later, Googlebot keeps on crawling the original no-HTTPS URLs. And showing, as 'Referring page', other no-HTTPS URLs:
http://example.com/product/my-product-name
http://example.com/category/my-category-name
http://example.com/product/another-product-name
Some facts:
I've checked the canonical meta tag of 'https://example.com/product/my-product-name' and it's ok
None of the no-HTTPS URLs are within a Sitemap file. http://example.com/sitemap.xml redirects to https://example.com/sitemap.xml
The 301 redirect of 'http://example.com/photos/my-product-name' and 'http://example.com/category/my-category-name' works ok. They redirect to the desired new URL.
The internal linking is ok, everything links to HTTPS
Two questions
After 5 years, should I implement somehow 410s for the old no-HTTPS URLs to avoid Googlebot to crawl?
Some of the old URLs were never indexed (they had 'noindex'). May I even include them into the robots.txt?
