UK Government Websites To Be Secured By HTTPS, HSTS, DMARC By October 2016

[Lucian Armasu]

The UK government announced that all government services' websites will have to use HTTPS encryption with HSTS pinning to ensure secure connections, as well as the DMARC protocol for email authentication to protect against phishing attacks.

UK Government Websites To Be Secured By HTTPS, HSTS, DMARC By October 2016 : Read more

 

[Kimonajane]

No worries just run the NSA co-authored Windows full of built in back doors and you'll be safe from anyone, LOL.

 

[Haravikk]

Ah the slow speed of technology in government. It's good to see them finally moving forward with this; I assume they're doing more than just adding DMARC though, as this also requires SPF and DKIM.

It also really needs to come with strict requirements for algorithms, as many that are usable in HTTPS are no longer recommended, so HTTPS alone is not enough if you have weak encryption schemes enabled. I'd like to see them keep up to date with developments on these issues.

 

[Virtual_Singularity]

Interesting. The UK govt, on the one hand, insists affiliated agencies take common sense precautions and more when it comes to security for their own sites, all the while encouraging common citizens not to routinely change their passwords (citing the inconvenience it poses), and mulls over removing encryption for them as well. Brilliant!