HTTPS Support:  Civic

UtahWatch.org evaluates and rates the HTTPS support of over 300 Utah websites and over 130 subdomains of Utah.gov.

See the About page to learn about the rating criteria and this project.

Click the Plus icon next to a name to see the reasons for that website's rating.

Advocacy, Policy

7/3/0
ACLU Utah (www.acluutah.org) Bad
  • Certificate not trusted by Mozilla cert store.
Tell ACLU Utah they should improve their HTTPS support: Tweet @acluutah
Digital Citizenship Utah (digcitutah.com) Bad
  • A verified TLS connection can be established. (SSL Labs report)
  • The HTML page loaded over HTTPS has mixed content.
  • HTTP Strict-Transport-Security header is not set. (About HSTS)
  • HTTP site doesn't redirect to HTTPS.
Tell Digital Citizenship Utah they should improve their HTTPS support: Tweet @digcitutah
EPIK (www.epik.org) Bad
  • A verified TLS connection can be established. (SSL Labs report)
  • The HTML page loaded over HTTPS has mixed content.
  • HTTP Strict-Transport-Security header is not set. (About HSTS)
  • HTTP site doesn't redirect to HTTPS.
Tell EPIK they should improve their HTTPS support: Tweet @epikalliance
Equality Utah (www.equalityutah.org) Mediocre
  • A verified TLS connection can be established. (SSL Labs report)
  • A page can be successfully fetched over HTTPS.
  • HTTP Strict-Transport-Security header is not set. (About HSTS)
  • HTTP site doesn't redirect to HTTPS.
Tell Equality Utah they should improve their HTTPS support: Tweet @equalityutah
Libertas Utah (www.libertasutah.org) Bad
  • A verified TLS connection can be established. (SSL Labs report)
  • The HTTPS site redirects to HTTP.
Tell Libertas Utah they should improve their HTTPS support: Tweet @libertasutah
Sutherland Institute (www.sutherlandinstitute.org) Bad
  • Certificate hostname verification fails.
Tell Sutherland Institute they should improve their HTTPS support: Tweet @sutherlandinst
Utah Assoc. of Public Charter Schools (www.utahcharters.org) Mediocre
  • A verified TLS connection can be established. (SSL Labs report)
  • A page can be successfully fetched over HTTPS.
  • HTTP Strict-Transport-Security header is set but the max-age is less than 30 days.
  • HTTP site redirects to HTTPS.
Tell Utah Assoc. of Public Charter Schools they should improve their HTTPS support: Tweet @utahcharters
Utah Eagle Forum (www.utaheagleforum.org) Bad
  • Nothing is listening on port 443.
Tell Utah Eagle Forum they should improve their HTTPS support: Tweet @ut_eagle_forum
Utah Foundation (www.utahfoundation.org) Bad
  • Certificate hostname verification fails.
Tell Utah Foundation they should improve their HTTPS support: Tweet @utahfoundation
Utah Public Employees' Association (www.upea.net) Mediocre
  • A verified TLS connection can be established. (SSL Labs report)
  • A page can be successfully fetched over HTTPS.
  • HTTP Strict-Transport-Security header is set but the max-age is less than 30 days.
  • HTTP site redirects to HTTPS.

Churches

6/2/0
Catholic Diocese of SLC (www.dioslc.org) Mediocre
  • A verified TLS connection can be established. (SSL Labs report)
  • A page can be successfully fetched over HTTPS.
  • HTTP Strict-Transport-Security header is not set. (About HSTS)
  • HTTP site doesn't redirect to HTTPS.
Tell Catholic Diocese of SLC they should improve their HTTPS support: Tweet @diocese_of_slc
City Church (www.citychurchutah.com) Bad
  • Certificate hostname verification fails.
Tell City Church they should improve their HTTPS support: Tweet @citychurchutah
Episcopal Diocese of Utah (www.episcopal-ut.org) Bad
  • Certificate not trusted by Mozilla cert store.
Tell Episcopal Diocese of Utah they should improve their HTTPS support: Tweet @dioceseofutah
Greek Orthodox Church of SLC (www.gocslc.org) Bad
  • Nothing is listening on port 443.
LDS Church (www.lds.org) Mediocre
  • A verified TLS connection can be established. (SSL Labs report)
  • A page can be successfully fetched over HTTPS.
  • HTTP Strict-Transport-Security header is not set. (About HSTS)
  • HTTP site redirects to HTTPS.
Tell LDS Church they should improve their HTTPS support: Tweet @ldschurch
Salt Lake Buddhist Temple (www.slbuddhist.org) Bad
  • Certificate hostname verification fails.
Tell Salt Lake Buddhist Temple they should improve their HTTPS support: Tweet @slbuddhist
SLC Jewish Community Center (www.slcjcc.org) Bad
  • Nothing is listening on port 443.
Tell SLC Jewish Community Center they should improve their HTTPS support: Tweet @saltlakejcc
Utah Islamic Center (www.utislamiccenter.org) Bad
  • Certificate hostname verification fails.
Tell Utah Islamic Center they should improve their HTTPS support: Tweet @utislamiccenter

Libraries

5/1/0
Salt Lake County Library Services (www.slcolibrary.org) Bad
  • connect() to port 443 times out.
Tell Salt Lake County Library Services they should improve their HTTPS support: Tweet @slcountylibrary
Salt Lake Public Library (www.slcpl.org) Bad
  • A verified TLS connection can be established. (SSL Labs report)
  • The HTML page loaded over HTTPS has mixed content.
  • HTTP Strict-Transport-Security header is not set. (About HSTS)
  • HTTP site doesn't redirect to HTTPS.
Tell Salt Lake Public Library they should improve their HTTPS support: Tweet @slcpl
Springville Library (www.springville.org) Mediocre
  • A verified TLS connection can be established. (SSL Labs report)
  • A page can be successfully fetched over HTTPS.
  • HTTP Strict-Transport-Security header is not set. (About HSTS)
  • HTTP site doesn't redirect to HTTPS.
Tell Springville Library they should improve their HTTPS support: Tweet @springvillecity
Utah Academic Library Consortium (www.ualc.net) Bad
  • Certificate not trusted by Mozilla cert store.
Utah Educational Library Media Assoc. (www.uelma.org) Bad
  • Nothing is listening on port 443.
Tell Utah Educational Library Media Assoc. they should improve their HTTPS support: Tweet @uelma_utah
Utah Library Association (www.ula.org) Bad
  • Certificate hostname verification fails.
Tell Utah Library Association they should improve their HTTPS support: Tweet @utahlibassoc

Tourism, Culture

5/3/0
Downtown SLC (www.downtownslc.org) Bad
  • A verified TLS connection can be established. (SSL Labs report)
  • The HTTPS site redirects to HTTP.
Tell Downtown SLC they should improve their HTTPS support: Tweet @downtownslc
The Leonardo (www.theleonardo.org) Bad
  • Nothing is listening on port 443.
Tell The Leonardo they should improve their HTTPS support: Tweet @the_leonardo
Utah Arts Festival (uaf.org) Bad
  • Certificate not trusted by Mozilla cert store.
Tell Utah Arts Festival they should improve their HTTPS support: Tweet @UtahArtsFest
Utah Office of Tourism (www.visitutah.com) Mediocre
  • A verified TLS connection can be established. (SSL Labs report)
  • A page can be successfully fetched over HTTPS.
  • HTTP Strict-Transport-Security header is not set. (About HSTS)
  • HTTP site redirects to HTTPS.
Tell Utah Office of Tourism they should improve their HTTPS support: Tweet @visitutah
Utah Ski & Snowboard Association (www.skiutah.com) Mediocre
  • A verified TLS connection can be established. (SSL Labs report)
  • A page can be successfully fetched over HTTPS.
  • HTTP Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site doesn't redirect to HTTPS.
Tell Utah Ski & Snowboard Association they should improve their HTTPS support: Tweet @skiutah
Utah Tourism Industry Association (www.utahtourism.org) Bad
  • Certificate not trusted by Mozilla cert store.
Utah.com (www.utah.com) Mediocre
  • A verified TLS connection can be established. (SSL Labs report)
  • A page can be successfully fetched over HTTPS.
  • HTTP Strict-Transport-Security header is not set. (About HSTS)
  • HTTP site redirects to HTTPS.
Tell Utah.com they should improve their HTTPS support: Tweet @utahdotcom
Visit Salt Lake (www.visitsaltlake.com) Bad
  • A verified TLS connection can be established. (SSL Labs report)
  • The HTTPS site redirects to HTTP.
Tell Visit Salt Lake they should improve their HTTPS support: Tweet @visitsaltlake


Back to the top