Hypertext Transfer Protocol Secure (HTTPS)
Privacy and integrity protection.
Impact
(How ScanGov measures tasklist priorities.)
Why it's important
Using HTTPS ensures secure communication between the user and the website, protecting privacy and preventing data tampering.User stories
As a site visitor, I want the website to use HTTPS so that my data is encrypted and protected from interception or tampering while browsing or submitting information.
Error
(ScanGov messaging when a site fails a standard)
Site is not served over HTTPS.
Guidance
All government websites must have HTTPS.
OMB Memorandum M-15-1338 requires agencies to encrypt HTTP traffic that travels over the public internet to or from a Federal system, using HTTPS and HTTP Strict Transport Security (HSTS)
About
Hypertext Transfer Protocol Secure (HTTPS) is the strongest privacy and integrity protection currently available for public web connections. HTTPS ensures users that their privacy is protected when visiting a government website.
HTTPS is indicated by a lock icon and/or https:// in the browser bar.
Examples
Example government websites with HTTPS:
Links
- The HTTPS-Only Standard (CIO.gov)
- M-15-13: Policy to Require Secure Connections across Federal Websites and Web Services