3 ms·
Even just HSTS is not widely deployed. Here in France for instance: * top 1 banking, top 18 FR https://www.ssllabs.com/ssltest/analyze.html?d=labanquepostale.f
by moviuro 7y ago
Even just HSTS is not widely deployed. Here in France for instance:
* top 1 banking, top 18 FR https://www.ssllabs.com/ssltest/analyze.html?d=labanquepostale.fr&latest https://www.ssllabs.com/ssltest/analyze.html?d=labanqueposta... no HSTS
* top 2 banking, top 20 FR https://www.ssllabs.com/ssltest/analyze.html?d=credit-agricole.fr https://www.ssllabs.com/ssltest/analyze.html?d=credit-agrico... no HSTS
* top 1 taxes, top 30 FR https://www.ssllabs.com/ssltest/analyze.html?d=www.impots.gouv.fr https://www.ssllabs.com/ssltest/analyze.html?d=www.impots.go... with CAA, HSTS (not preload), OCSP Must-Staple! (that's a surprise)
* top 3 banking, top 45 FR https://www.ssllabs.com/ssltest/analyze.html?d=caisse%2depargne.fr&latest https://www.ssllabs.com/ssltest/analyze.html?d=caisse%2depar... no HSTS
Hopefuly, by 2030 banks will have caught up to the 2018 standard for "secure".