HTTPSWatch (New Zealand)

HTTPSWatch tracks the HTTPS support of prominent websites. Click to show details about a site’s HTTPS support. See the About page for more information.

News

5/3/0
Stuff (www.stuff.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
NZ Herald (www.nzherald.co.nz) Bad
  • A verified TLS connection can be established. SSL Labs grade is A-.
  • The HTML page loaded over HTTPS has mixed content.
  • Strict-Transport-Security header is not set.
  • HTTP site doesn't redirect to HTTPS.
Scoop (www.scoop.co.nz) Bad
  • Nothing is listening on port 443.
3news (www.3news.co.nz) Bad
  • Certificate not trusted by Mozilla cert store.
TVNZ (tvnz.co.nz) Bad
Radio NZ (www.radionz.co.nz) Bad
  • A verified TLS connection can be established. SSL Labs grade is A.
  • The HTTPS site redirects to HTTP.
The Spin Off (thespinoff.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
NBR (www.nbr.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is C.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.

Universities

4/3/1
AUT (www.aut.ac.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A-.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site doesn't redirect to HTTPS.
University of Otago (www.otago.ac.nz) Bad
  • A verified TLS connection can be established. SSL Labs grade is C.
  • The HTTPS site redirects to HTTP.
Waikato University (www.waikato.ac.nz) Bad
  • A verified TLS connection can be established. SSL Labs grade is A.
  • Connection error when connecting to the HTTPS site.
Massey University (massey.ac.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site doesn't redirect to HTTPS.
Auckland University (www.auckland.ac.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Victoria University (www.victoria.ac.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Lincoln University (www.lincoln.ac.nz) Bad
  • Nothing is listening on port 443.
Canterbury University (www.canterbury.ac.nz) Bad
  • Nothing is listening on port 443.

NZ Government

3/7/4
NZ government (www.govt.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site doesn't redirect to HTTPS.
Inland Revenue Department (www.ird.govt.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A-.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site doesn't redirect to HTTPS.
Immigration NZ (www.immigration.govt.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A-.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Data NZ (data.govt.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Customs (www.customs.govt.nz) Bad
  • connect() to port 443 times out.
CERT NZ (www.cert.govt.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
GCSB (www.GCSB.govt.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
National Cyber Security Centre (www.ncsc.govt.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
NZ Defence Force (www.nzdf.mil.nz) Bad
  • connect() to port 443 times out.
NZ SIS (nzsis.govt.nz) Bad
  • Nothing is listening on port 443.
NZTA (www.nzta.govt.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site doesn't redirect to HTTPS.
Auckland Transport (at.govt.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Real Me (DIA) (www.realme.govt.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Real Me (DIA) Login (www2.logon.realme.govt.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.

NZ Banks

0/11/3
Kiwibank (www.kiwibank.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Kiwibank IB login (www.ib.kiwibank.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
ASB (www.asb.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A-.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
ASB IB login (online.asb.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A-.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • The HTTP site times out.
Westpac (www.westpac.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A-.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Westpac IB Login (bank.westpac.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A-.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • The HTTP site times out.
ANZ (www.anz.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
ANZ IB Login (digital.anz.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A-.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • The HTTP site times out.
BNZ (www.bnz.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
BNZ IB Login (www.bnz.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
SBSBank (www.sbsbank.co.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
SBSBank IB Login (secure.sbsbank.co.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
TSB Bank (www.tsbbank.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
TSB Bank IB Login (homebank.tsbbank.co.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is B.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.

NZ sites

1/4/5
Trademe (www.trademe.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
gpforums (www.gpforums.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
geekzone (www.geekzone.co.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Metservce (metservice.com) Bad
  • connect() to port 443 times out.
Geonet (geonet.org.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site doesn't redirect to HTTPS.
Seek (www.seek.co.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
AirNZ (www.airnewzealand.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
NZ Post (www.nzpost.co.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is B.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
InternetNZ (internetnz.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A-.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
FYI (fyi.org.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.

NZ Hosting companies

4/3/1
The Cloud (thecloud.net.nz) Bad
  • Certificate hostname verification fails.
Sitehost (www.sitehost.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is B.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
RimuHosting (rimuhosting.com) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set but the max-age is less than 30 days.
  • HTTP site redirects to HTTPS.
Webdrive (www.webdrive.co.nz) Bad
  • A verified TLS connection can be established. SSL Labs grade is A.
  • The HTTPS site redirects to HTTP.
Net24 (www.net24.co.nz) Bad
  • Certificate not trusted by Mozilla cert store.
iforce (www.iforce.co.nz) Bad
  • connect() to port 443 times out.
Freeparking (www.freeparking.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A-.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
I want my name (iwantmyname.com) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.

NZ Software/Tech Companies

5/4/4
OrionHealth (orionhealth.com) Bad
  • A verified TLS connection can be established. SSL Labs grade is A.
  • Connection error when connecting to the HTTPS site.
Vend (www.vendhq.com) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Enlighten Designs (www.enlighten.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is C.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site doesn't redirect to HTTPS.
Vista Entertainment (vista.co) Bad
  • connect() returns with error ECONNRESET.
Xero (www.Xero.com) Mediocre
  • A verified TLS connection can be established. (SSL Labs report)
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Intergen (www.intergen.co.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Datacom (datacom.co.nz) Bad
  • Nothing is listening on port 443.
Silverstripe (silverstripe.co.nz) Bad
  • Certificate hostname verification fails.
Catalyst (www.catalyst.net.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site doesn't redirect to HTTPS.
Spark Digital (gen-i) (www.sparkdigital.co.nz) Bad
  • Nothing is listening on port 443.
MEGA NZ (mega.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A-.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Pocketsmith (pocketsmith.com) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Pushpay (pushpay.com) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.

NZ ISPs/Telecos

2/6/3
Spark (www.spark.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is B.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Vodafone (www.vodafone.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A-.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
2Degrees (www.2degreesmobile.co.nz) Bad
  • A verified TLS connection can be established. SSL Labs grade is C.
  • Connection error when connecting to the HTTPS site.
Orcon (www.Orcon.net.nz) Mediocre
  • A verified TLS connection can be established. (SSL Labs report)
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Slingshot (www.slingshot.co.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is C.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
bigpipe (www.bigpipe.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
World Exchange (www.wxc.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is C.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Trustpower (www.trustpower.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is C.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Callplus (www.callplus.co.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is C.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Uber (uber.co.nz) Bad
  • A verified TLS connection can be established. SSL Labs grade is A.
  • The HTML page loaded over HTTPS has mixed content.
  • Strict-Transport-Security header is not set.
  • HTTP site doesn't redirect to HTTPS.
REANNZ (reannz.co.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.

NZ tech conferences

6/5/1
Kiwi Ruby (kiwi.ruby.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Codemania (codemania.io) Bad
  • Certificate hostname verification fails.
Nethui (2017.nethui.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
NZNOG (www.nznog.org) Bad
  • A TLS-related error (None) occurs when trying to connect.
NZpyCon (python.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
  • Certificate hostname verification fails.
CHcon 2017 (2017.chcon.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Kiwicon (kiwicon.org) Bad
  • A verified TLS connection can be established. (SSL Labs report)
  • Connection error when connecting to the HTTPS site.
Microsoft Ignite (TechEd) (msignite.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
NZ Gather (gathergather.co.nz) Bad
  • Certificate hostname verification fails.
NZ GovHack (govhack.org.nz) Bad
  • A verified TLS connection can be established. SSL Labs grade is A.
  • The HTML page loaded over HTTPS has mixed content.
  • Strict-Transport-Security header is not set.
  • HTTP site doesn't redirect to HTTPS.
bsides wellington (bsides.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.

NZ political parties

5/2/0
National (www.national.org.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A-.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Labour (campaign.labour.org.nz) Bad
  • A verified TLS connection can be established. SSL Labs grade is A.
  • The HTTPS site redirects to HTTP.
Green Party (www.greens.org.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
NZ First (nzfirst.org.nz) Bad
  • Certificate not trusted by Mozilla cert store.
Maori Party (maoriparty.org) Bad
  • Certificate not trusted by Mozilla cert store.
ACT (www.act.org.nz) Bad
  • Nothing is listening on port 443.
United Future (www.unitedfuture.org.nz) Bad
  • Certificate hostname verification fails.

NZ Retail sites

1/6/5
The Warehouse (www.thewarehouse.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site doesn't redirect to HTTPS.
Countdown (www.countdown.co.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Yellow Pages (yellow.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Briscoes (www.briscoes.co.nz) Bad
  • A verified TLS connection can be established. SSL Labs grade is A.
  • The HTML page loaded over HTTPS has mixed content.
  • Strict-Transport-Security header is not set.
  • HTTP site doesn't redirect to HTTPS.
Mitre10 (www.mitre10.co.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
PBTech (pbtech.co.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
1-day (www.1-day.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is B.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Grabone (www.grabone.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
MightyApe (www.mightyape.co.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Noel Leeming (www.noelleeming.co.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
PriceSpy (pricespy.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Harvey Norman (www.harveynorman.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site doesn't redirect to HTTPS.