Hypertext Transfer Protocol Secure (HTTPS) (Security)

Privacy and integrity protection.

• Rescan
• Share
  • This page
  • LinkedIn
  • Bluesky
  • Mastodon
  • X
  • Email

Impact

(ScanGov impact)

About

Hypertext Transfer Protocol Secure (HTTPS) is the strongest privacy and integrity protection currently available for public web connections. HTTPS ensures users that their privacy is protected when visiting a government website.

HTTPS is indicated by a lock icon and/or https:// in the browser bar.

Why it's important

Secures data by encrypting communication, protecting user privacy and preventing unauthorized access to sensitive information during online interactions.

User stories

As a site visitor, I want the website to use HTTPS so that my data is encrypted and protected from interception or tampering while browsing or submitting information.

Error

(ScanGov messaging when a site fails a standard)

Site is not served over HTTPS.

Examples

Example government websites with HTTPS:

• https://digital.gov
• https://whitehouse.gov

Guidance

• U.S. Federal Website Standards
• Memorandum (M-23-22)

Links

• The HTTPS-Only Standard (CIO.gov)
• M-15-13: Policy to Require Secure Connections across Federal Websites and Web Services

Indicators

• Security