Last updated: December 20, 2015

The United States federal government mandated that all publicly accessible federal websites use a secure connection by December 31, 2016.  This page tracks the progress of U.S. Cabinet Level Agencies’ Websites along with other useful information.

Links to agencies on Pulse HTTPS the government’s public dashboard.  See all domains under the agency and their statuses

• Agriculture
• Commerce
• Defense
• Education
• Energy
• Health and Human Services
• Homeland Security
• Housing and Urban Development
• Interior
• Justice
• Labor
• State
• Transportation
• Treasury
• Veterans Affairs

Timeline of Progress

• December 4, 2015 – 34%
• December 31, 2016 – 100% <- let’s see if that happens

Source: Pulse HTTPS

Previous reports

Report of SSL Labs Grades on May 25, 2015

Agency (alphabetical)	Domain	SSL Labs Server Test	Grade (on 5/25/15)
Agriculture	http://www.usda.gov/	Link	No secure protocols supported
Commerce	http://www.commerce.gov/	Link	C
Defense	http://www.defense.gov/	Link	Certificate name mismatch
Education	http://www.ed.gov/	Link	C
Energy	http://www.energy.gov/	Link	No secure protocols supported
Health and Human Services	http://www.hhs.gov/	Link	B
Homeland Security	http://www.dhs.gov/	Link	A- / C (Inconsistent server configuration)
Housing and Urban Development	http://www.hud.gov/	Link	No secure protocols supported
Interior	http://www.doi.gov/	Link	Certificate name mismatch
Justice	http://www.justice.gov/	Link	Certificate not valid for domain name / No secure protocols supported
Labor	http://www.dol.gov/	Link	B / C (Inconsistent server configuration)
State	http://www.state.gov/	Link	Certificate not valid for domain name / No secure protocols supported
Transportation	http://www.dot.gov/	Link	B
Treasury	http://www.treasury.gov/	Link	B / No secure protocols supported (Inconsistent server configuration)
Veterans Affairs	http://www.va.gov/	Link	T (C if trust issues are ignored)

Source: SSL Labs server test version: 1.18.1 performed on 5/25/15

 

References

Source: https://www.whitehouse.gov/administration/cabinet

• US CIO HTTPS-Only Standard Website
• Pulse HTTPS – how federal government domains are meeting best practices on the web

License

Content from Qualys licensed under a Creative Commons Attribution 3.0 License (http://creativecommons.org/licenses/by/3.0/us/).  No changes were made to the original content.

Original content on this page is available under a Creative Commons Attribution 3.0 Unported License (CC BY 3.0) https://creativecommons.org/licenses/by/3.0/. In other words, share generously but provide attribution.