Setting the standard: Website security for the Norwegian government
summary
Norway adopts a government-wide recommendation to deploy HTTPS by default and a concrete standard gets written and ordered by the Ministry of Justice. Audits show 261 of 3,681 domains used HTTPS, a result worse than expected. The work uses automated checks and public tools like SSL Labs and Scott Helme’s header tests plus GitHub scripts, prescribes use TLS 1.2 with strong ciphers, recommends HSTS and certificate pinning and hardware key protection, and documents costs, mixed‑content pitfalls and measurable performance outcomes.
AI-written summary · about
chapters (11)
- 0:00Intro
- 6:40How secure are Norwegian newspapers
- 10:35Do you trust the government
- 11:50HTTPS Everywhere
- 16:00Panama Papers
- 20:15General Walter
- 22:20Statistics
- 24:47Purpose
- 26:07Limitations
- 28:23Possible wins
- 31:24Performance impact
related talks
01h 26mMaking HTTPS the Default in the World's Largest Bureaucracy
37mHTTPS Is Better than Ever Before. Now Its Your Turn.
43mEmerging Web Security Standards
51mWeb Platform: The Secure Parts
48mOvercoming a million reasons not to be HTTPS only
58m25 Years of SSL - Secure(ish) Sockets Layer
59mProactively defending your business
30mMeasuring HTTPS Adoption on the Web