{
    "version" : "https://jsonfeed.org/version/1",
    "content" : "news",
    "type" : "single",
    "title" : "An Introduction to HTTPS, by 18F and DigitalGov University |Digital.gov",
    "description": "An Introduction to HTTPS, by 18F and DigitalGov University",
    "home_page_url" : "/preview/gsa/digitalgov.gov/bc-archive-content-3/","feed_url" : "/preview/gsa/digitalgov.gov/bc-archive-content-3/2015/07/21/an-introduction-to-https-by-18f-and-digitalgov-university/index.json","item" : [
    {"title" :"An Introduction to HTTPS, by 18F and DigitalGov University","summary" : "18F uses HTTPS for everything we make, and the U.S. government is in the process of transitioning to HTTPS everywhere. As part of this effort, we’ve recently partnered with DigitalGov University to produce a two-video series introducing the why’s and how’s of HTTPS. In an Introduction to HTTPS for beginners, we cover what happens when","date" : "2015-07-21T11:10:31-04:00","date_modified" : "2025-01-27T19:42:55-05:00","authors" : {"eric-mill" : "Eric Mill","gray-brooks" : "Gray Brooks"},"topics" : {
        
            "content-strategy" : "Content strategy",
            "software-engineering" : "Software engineering"
            },"branch" : "bc-archive-content-3",
      "filename" :"2015-07-21-an-introduction-to-https-by-18f-and-digitalgov-university.md",
      
      "filepath" :"news/2015/07/2015-07-21-an-introduction-to-https-by-18f-and-digitalgov-university.md",
      "filepathURL" :"https://github.com/GSA/digitalgov.gov/blob/bc-archive-content-3/content/news/2015/07/2015-07-21-an-introduction-to-https-by-18f-and-digitalgov-university.md",
      "editpathURL" :"https://github.com/GSA/digitalgov.gov/edit/bc-archive-content-3/content/news/2015/07/2015-07-21-an-introduction-to-https-by-18f-and-digitalgov-university.md","slug" : "an-introduction-to-https-by-18f-and-digitalgov-university","url" : "/preview/gsa/digitalgov.gov/bc-archive-content-3/2015/07/21/an-introduction-to-https-by-18f-and-digitalgov-university/","content" :"\u003cdiv class=\"image\"\u003e\n  \u003cimg\n    src=\"https://s3.amazonaws.com/digitalgov/_legacy-img/2015/06/600-x-400-https-weerapatkiatdumrong-iStock-Thinkstock-520737069.jpg\"\n    alt=\"A small metal padlock rests on a keyboard to represent HTTPS; hypertext transfer protocol secure\"/\u003e\u003c/div\u003e\n\n\n\u003cp\u003e18F \u003ca href=\"https://18f.gsa.gov/2014/11/13/why-we-use-https-in-every-gov-website-we-make/\"\u003euses HTTPS for everything we make\u003c/a\u003e, and the U.S. government is in the process of \u003ca href=\"https://18f.gsa.gov/2015/06/08/the-us-government-is-moving-to-https-everywhere/\"\u003etransitioning to HTTPS everywhere\u003c/a\u003e. As part of this effort, we’ve recently partnered with \u003ca href=\"https://digital.gov/digitalgov-university/\"\u003eDigitalGov University\u003c/a\u003e to produce a two-video series introducing the why’s and how’s of HTTPS.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIn an \u003ca href=\"https://18f.gsa.gov/2015/07/16/introduction-to-https-webinar/#introduction-to-https-for-beginners\"\u003eIntroduction to HTTPS for beginners\u003c/a\u003e, we cover what happens when you use the web, how HTTPS helps protect users, and examines why the web (including the U.S. government) is transitioning to use it for everything. \u003cstrong\u003eNo technical background required\u003c/strong\u003e.\u003c/li\u003e\n\u003cli\u003eIn \u003ca href=\"https://18f.gsa.gov/2015/07/16/introduction-to-https-webinar/#implementing-https\"\u003eImplementing HTTPS\u003c/a\u003e, we cover the mechanics of HTTPS, how to migrate a website or an API, some of the most important technical guidelines when setting up HTTPS, and some ongoing and future technical and political developments in the field. Some technical background is helpful, though not required.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2 id=\"introduction-to-https-for-beginners\"\u003eIntroduction to HTTPS for Beginners\u003c/h2\u003e\n\u003cp\u003eThis presentation explains how communication across the web works today and briefly dives into \u003ca href=\"https://www.whitehouse.gov/\"\u003ewhitehouse.gov\u003c/a\u003e using an ordinary browser. It then shows \u003ca href=\"https://https.cio.gov/faq/\"\u003ehow HTTPS protects users on the web\u003c/a\u003e, and walks through a number of reasons for the web and the government to use \u003ca href=\"https://https.cio.gov/everything/\"\u003eHTTPS everywhere\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eThere is no technical background required for this video—anyone who has used the web before should be able to understand the concepts discussed.\u003c/p\u003e\n\u003cp\u003e[youtube=http://www.youtube.com/watch?v=d2GmcPYWm5k\u0026amp;w=600]\u003c/p\u003e\n\u003cp\u003eTable of contents:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.youtube.com/watch?v=d2GmcPYWm5k\u0026amp;feature=youtu.be\u0026amp;t=0m0s\"\u003e0:00\u003c/a\u003e – Introduction to the webinar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.youtube.com/watch?v=d2GmcPYWm5k\u0026amp;feature=youtu.be\u0026amp;t=2m34s\"\u003e2:34\u003c/a\u003e – What happens when you use the web\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.youtube.com/watch?v=d2GmcPYWm5k\u0026amp;feature=youtu.be\u0026amp;t=10m12s\"\u003e10:12\u003c/a\u003e – Exploring whitehouse.gov via Chrome Developer Tools\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.youtube.com/watch?v=d2GmcPYWm5k\u0026amp;feature=youtu.be\u0026amp;t=14m54s\"\u003e14:54\u003c/a\u003e – How HTTPS helps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.youtube.com/watch?v=d2GmcPYWm5k\u0026amp;feature=youtu.be\u0026amp;t=24m50s\"\u003e24:50\u003c/a\u003e – Why HTTPS for everything?\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.youtube.com/watch?v=d2GmcPYWm5k\u0026amp;feature=youtu.be\u0026amp;t=32m37s\"\u003e32:37\u003c/a\u003e – Why not HTTPS for everything?\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.youtube.com/watch?v=d2GmcPYWm5k\u0026amp;feature=youtu.be\u0026amp;t=38m29s\"\u003e38:29\u003c/a\u003e – Now we’re using it for everything\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.youtube.com/watch?v=d2GmcPYWm5k\u0026amp;feature=youtu.be\u0026amp;t=41m25s\"\u003e41:25\u003c/a\u003e – Q\u0026amp;A until the end\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2 id=\"implementing-https\"\u003eImplementing HTTPS\u003c/h2\u003e\n\u003cp\u003eThis presentation discusses how HTTPS works today, the technical details of \u003ca href=\"https://https.cio.gov/mixed-content/\"\u003emigrating websites\u003c/a\u003e and \u003ca href=\"https://https.cio.gov/apis/\"\u003eAPIs\u003c/a\u003e to HTTPS, and goes into the specifics of \u003ca href=\"https://https.cio.gov/hsts/\"\u003eHTTP Strict Transport Security\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eIt then covers the most important \u003ca href=\"https://https.cio.gov/technical-guidelines/\"\u003etechnical guidelines\u003c/a\u003e that all websites (not just the government) should be aware of when setting up HTTPS, many of which are measured by \u003ca href=\"https://pulse.18f.gov/https/domains/\"\u003ethe Pulse HTTPS dashboard\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eFinally, the presentation looks ahead at some ongoing and future technical and political developments in the field of HTTPS and certificate authorities.\u003c/p\u003e\n\u003cp\u003eSome technical background in the web is helpful, but may not be required for much of the material.\u003c/p\u003e\n\u003cp\u003e[youtube=http://www.youtube.com/watch?v=rnM2qAfEG-M\u0026amp;w=600]\u003c/p\u003e\n\u003cp\u003eTable of contents:\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://youtu.be/rnM2qAfEG-M?t=0m0s\"\u003e0:00\u003c/a\u003e – Introduction to the presentation\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://www.youtube.com/watch?v=rnM2qAfEG-M\u0026amp;feature=youtu.be\u0026amp;t=6m5s\"\u003e6:05\u003c/a\u003e – Recap: Intro to HTTPS\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://www.youtube.com/watch?v=rnM2qAfEG-M\u0026amp;feature=youtu.be\u0026amp;t=10m56s\"\u003e10:56\u003c/a\u003e – How HTTPS works\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://www.youtube.com/watch?v=rnM2qAfEG-M\u0026amp;feature=youtu.be\u0026amp;t=33m20s\"\u003e33:20\u003c/a\u003e – Migrating to HTTPS\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://www.youtube.com/watch?v=rnM2qAfEG-M\u0026amp;feature=youtu.be\u0026amp;t=41m2s\"\u003e41:02\u003c/a\u003e – Strict Transport Security (HSTS)\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://www.youtube.com/watch?v=rnM2qAfEG-M\u0026amp;feature=youtu.be\u0026amp;t=51m55s\"\u003e51:55\u003c/a\u003e – Technical guidelines\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://www.youtube.com/watch?v=rnM2qAfEG-M\u0026amp;feature=youtu.be\u0026amp;t=71m45s\"\u003e1:11:45\u003c/a\u003e – The future\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://www.youtube.com/watch?v=rnM2qAfEG-M\u0026amp;feature=youtu.be\u0026amp;t=89m29s\"\u003e1:29:29\u003c/a\u003e – Q\u0026amp;A\u003c/p\u003e\n\u003cp\u003eWe’ve also created an accompanying list of \u003ca href=\"https://github.com/GSA/https/blob/master/resources/implementing-https-links.md\"\u003elinks used in the presentation\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eAs 18F, the U.S. Digital Service and other agencies develop these resources, we’ll continue to share them with other federal, state, and local agencies as well as the public, so that everyone can benefit from what we’ve learned. Big thank you to DigitalGov University for working with us to create these presentations!\u003c/p\u003e\n\u003cp\u003e\u003cem\u003eThis post was originally published on the \u003ca href=\"https://18f.gsa.gov/blog/\"\u003e18 blog\u003c/a\u003e by Eric Mill and Gray Brooks, 18 team members.\u003c/em\u003e\u003c/p\u003e\n"}
  ]
}