HTTPSWatch (Global)

HTTPSWatch tracks the HTTPS support of prominent websites. Click to show details about a site’s HTTPS support. See the About page for more information.

Social Media

1/3/7
LinkedIn (www.linkedin.com) Good
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Thank LinkedIn for providing high quality HTTPS:
Facebook (www.facebook.com) Good
  • A verified TLS connection can be established. SSL Labs grade is B.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Thank Facebook for providing high quality HTTPS:
Twitter (twitter.com) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Thank Twitter for providing high quality HTTPS:
Pinterest (www.pinterest.com) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Thank Pinterest for providing high quality HTTPS:
Instagram (instagram.com) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is B.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set but the max-age is less than 30 days.
  • HTTP site redirects to HTTPS.
Tell Instagram they should improve their HTTPS support:
Reddit (www.reddit.com) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Thank Reddit for providing high quality HTTPS:
YouTube (www.youtube.com) Good
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Thank YouTube for providing high quality HTTPS:
Vimeo (vimeo.com) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Thank Vimeo for providing high quality HTTPS:
Match.com (www.match.com) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A-.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Tell Match.com they should improve their HTTPS support:
OkCupid (www.okcupid.com) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Tell OkCupid they should improve their HTTPS support:
Disqus (disqus.com) Bad
  • A verified TLS connection can be established. SSL Labs grade is A.
  • Requesting HTTPS page times out.
Tell Disqus they should improve their HTTPS support:

Commerce

0/8/2
Apple (store.apple.com) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is B.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Amazon (www.amazon.com) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Thank Amazon for providing high quality HTTPS:
Best Buy (www.bestbuy.com) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Tell Best Buy they should improve their HTTPS support:
eBay (www.ebay.com) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Tell eBay they should improve their HTTPS support:
craigslist (www.craigslist.org) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set but the max-age is less than 30 days.
  • HTTP site redirects to HTTPS.
Target (www.target.com) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Thank Target for providing high quality HTTPS:
Walmart (www.walmart.com) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set but the max-age is less than 30 days.
  • HTTP site redirects to HTTPS.
Tell Walmart they should improve their HTTPS support:
CVS (www.cvs.com) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set but the max-age is less than 30 days.
  • HTTP site redirects to HTTPS.
Tell CVS they should improve their HTTPS support:
Home Depot (www.homedepot.com) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Tell Home Depot they should improve their HTTPS support:
Barnes & Noble (www.barnesandnoble.com) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is B.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.

Cloud Storage

0/2/4
Box (www.box.com) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Thank Box for providing high quality HTTPS:
Dropbox (www.dropbox.com) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Thank Dropbox for providing high quality HTTPS:
Google Drive (drive.google.com) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Tell Google Drive they should improve their HTTPS support:
iCloud (www.icloud.com) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
OneDrive (onedrive.live.com) Good
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Thank OneDrive for providing high quality HTTPS:
Tarsnap (www.tarsnap.com) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site doesn’t redirect to HTTPS.
Tell Tarsnap they should improve their HTTPS support:

Publishing Platforms

0/2/3
Blogger (www.blogger.com) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Tell Blogger they should improve their HTTPS support:
Medium (medium.com) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Thank Medium for providing high quality HTTPS:
Squarespace (squarespace.com) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set but the max-age is less than 30 days.
  • HTTP site redirects to HTTPS.
Tell Squarespace they should improve their HTTPS support:
Tumblr (staff.tumblr.com) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Thank Tumblr for providing high quality HTTPS:
WordPress (wordpress.com) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Thank WordPress for providing high quality HTTPS: