263
edits
Changes
Jump to navigation
Jump to search
Line 75:
Line 75: − +
GC HTTPS Everywhere/Strategy (view source)
Revision as of 21:24, 24 October 2018
, 21:24, 24 October 2018→Suggested Action Plan for ITPIN Compliance
* Departmental business units
* Departmental business units
<br>
<br>
3. Provide an up-to-date list of all domain and sub-domains of the publicly-accessible websites and web services to the following website: [https://canada-ca.github.io/pages/submit-institutional-domains.html Submit your institution's domains]. Alternatively, submit the CSV output from the [https://https-everywhere.canada.ca/ HTTPS Dashboard] to ZZTBSCYBERS@tbs-sct.gc.ca, noting additions in <span style="color:green;">green</span>, deletions in <span style="color:red;">red</span>, and modifications (e.g.: ownership) in <span style="color:yellow;">yellow</span>.
3. Provide an up-to-date list of all domain and sub-domains of the publicly-accessible websites and web services to the following website: [https://canada-ca.github.io/pages/submit-institutional-domains.html Submit your institution's domains]. Alternatively, submit the CSV output from the [https://https-everywhere.canada.ca/ HTTPS Dashboard] to ZZTBSCYBERS@tbs-sct.gc.ca, noting additions in <span style="color:green;">green</span>, deletions in <span style="color:red;">red</span>, and modifications (e.g.: ownership) in <span style="color:yellow;background:#AAAAAA;">yellow</span>.
<br><br>
<br><br>
4. Perform an assessment of the domains and sub-domains to determine the status of the configuration. Tools available to support this activity includes GC HTTPS Dashboard, SSL Labs, Hardenize, etc.
4. Perform an assessment of the domains and sub-domains to determine the status of the configuration. Tools available to support this activity includes GC HTTPS Dashboard, SSL Labs, Hardenize, etc.
