HTTPS Readiness test

Input

Check here if your site complies with the HTTPS best practices

Invalid domain name

  • The domain name [twitter.com] you've given does not seem to be valid
  • Examples: google.com • www.yahoo.com • www.standard.co.uk • timeoff.management •
  • This tool doesn't yet work with IDN domains like кто.рф

    • How to get https for your site

  • Let’s Encrypt is a free, automated, and open Certificate Authority.
    Example: cloudfleet.io, scotthelme.co.uk
  • Cloudflare One-Click SSL (also on the Free Plan)
    Example: toolstud.io
  • Paid certificates: Verisign, GeoTrust, Comodo, DigiCert, Thawte, Globalsign
    Example: www.amazon.com, www.mozilla.org, twitter.com

    • References

  • Google Chrome and/or Search will punish your website for insecure content and practices. In short, every site should be https://, and should send every visitor of their http:// site to the secure one.
  • Google Chrome: Our plan to label HTTP sites as non-secure is taking place in gradual steps
  • Data Security Action Plan, step 1: Implement strict encryption measures on all network traffic
  • BuiltWith: SSL by Default Usage Statistics
  • Analysis of the Alexa Top 1M sites: HTTPS, HSTS, CSP