HTTPSWatch (New Zealand)

HTTPSWatch tracks the HTTPS support of prominent websites. Click to show details about a site’s HTTPS support. See the About page for more information.

News

6/1/0
Stuff (www.stuff.co.nz) Bad
  • A verified TLS connection can be established. SSL Labs grade is A.
  • The HTTPS site redirects to HTTP.
NZ Herald (www.nzherald.co.nz) Bad
Scoop (www.scoop.co.nz) Bad
  • Nothing is listening on port 443.
3news (www.3news.co.nz) Bad
  • Certificate not trusted by Mozilla cert store.
TVNZ (tvnz.co.nz) Bad
Radio NZ (www.radionz.co.nz) Bad
  • Nothing is listening on port 443.
NBR (www.nbr.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is C.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.

Universities

4/2/1
AUT (www.aut.ac.nz) Bad
  • A verified TLS connection can be established. SSL Labs grade is A-.
  • The HTML page loaded over HTTPS has mixed content.
  • Strict-Transport-Security header is not set.
  • HTTP site doesn't redirect to HTTPS.
University of Otago (www.otago.ac.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is B.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site doesn't redirect to HTTPS.
Waikato University (www.waikato.ac.nz) Bad
  • A verified TLS connection can be established. SSL Labs grade is A.
  • The HTTPS site redirects to HTTP.
Massey University (massey.ac.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is C.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site doesn't redirect to HTTPS.
Auckland University (www.auckland.ac.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Victoria University (www.victoria.ac.nz) Bad
  • A verified TLS connection can be established. SSL Labs grade is B.
  • The HTTPS site redirects to HTTP.
Canterbury University (www.canterbury.ac.nz) Bad
  • Nothing is listening on port 443.

NZ Government

3/5/4
NZ government (www.govt.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Inland Revenue Department (www.ird.govt.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is C.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site doesn't redirect to HTTPS.
Immigration NZ (www.immigration.govt.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A-.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Data NZ (data.govt.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Customs (www.customs.govt.nz) Bad
  • connect() to port 443 times out.
GCSB (www.GCSB.govt.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
National Cyber Security Centre (www.ncsc.govt.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
NZ Defence Force (www.nzdf.mil.nz) Bad
  • connect() to port 443 times out.
NZ SIS (nzsis.govt.nz) Bad
  • Nothing is listening on port 443.
NZTA (www.nzta.govt.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site doesn't redirect to HTTPS.
Auckland Transport (at.govt.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Real Me (DIA) (www.realme.govt.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.

NZ Banks

0/9/5
Kiwibank (www.kiwibank.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site doesn't redirect to HTTPS.
Kiwibank IB login (www.ib.kiwibank.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
ASB (www.asb.co.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A-.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
ASB IB login (fnc.asbbank.co.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A-.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Westpac (www.westpac.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A-.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site doesn't redirect to HTTPS.
Westpac IB Login (bank.westpac.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A-.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • The HTTP site times out.
ANZ (www.anz.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is C.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site doesn't redirect to HTTPS.
ANZ IB Login (secure.anz.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is C.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • The HTTP site times out.
BNZ (www.bnz.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
BNZ IB Login (www.bnz.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
SBSBank (www.sbsbank.co.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
SBSBank IB Login (secure.sbsbank.co.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
TSB Bank (www.tsbbank.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
TSB Bank IB Login (homebank.tsbbank.co.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is B.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.

NZ sites

5/1/4
Trademe (www.trademe.co.nz) Bad
  • A verified TLS connection can be established. SSL Labs grade is A.
  • The HTTPS site redirects to HTTP.
gpforums (www.gpforums.co.nz) Bad
  • Nothing is listening on port 443.
geekzone (www.geekzone.co.nz) Bad
  • A verified TLS connection can be established. SSL Labs grade is A.
  • The HTTPS site redirects to HTTP.
Metservce (metservice.com) Bad
  • connect() to port 443 times out.
Geonet (geonet.org.nz) Bad
  • A verified TLS connection can be established. SSL Labs grade is A.
  • The HTML page loaded over HTTPS has mixed content.
  • Strict-Transport-Security header is not set.
  • HTTP site doesn't redirect to HTTPS.
Seek (www.seek.co.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
AirNZ (www.airnewzealand.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
NZ Post (www.nzpost.co.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is B.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
InternetNZ (internetnz.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A-.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
FYI (fyi.org.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.

NZ Hosting companies

4/3/1
The Cloud (thecloud.net.nz) Bad
  • Certificate hostname verification fails.
Sitehost (www.sitehost.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is B.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
RimuHosting (rimuhosting.com) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is B.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Webdrive (www.webdrive.co.nz) Bad
  • A verified TLS connection can be established. SSL Labs grade is A.
  • The HTTPS site redirects to HTTP.
Net24 (www.net24.co.nz) Bad
  • A verified TLS connection can be established. SSL Labs grade is C.
  • The HTML page loaded over HTTPS has mixed content.
  • Strict-Transport-Security header is not set.
  • HTTP site doesn't redirect to HTTPS.
iforce (www.iforce.co.nz) Bad
  • connect() to port 443 times out.
Freeparking (www.freeparking.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A-.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
I want my name (iwantmyname.com) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.

NZ Software/Tech Companies

5/3/3
OrionHealth (www.orionhealth.com) Good
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Vend (www.vendhq.com) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site doesn't redirect to HTTPS.
Enlighten Designs (www.enlighten.co.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is C.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Vista Entertainment (vista.co) Bad
  • connect() returns with error ECONNRESET.
Xero (www.Xero.com) Mediocre
  • A verified TLS connection can be established. (SSL Labs report)
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Intergen (www.intergen.co.nz) Bad
  • connect() returns with error ECONNRESET.
Datacom (datacom.co.nz) Bad
  • Nothing is listening on port 443.
Silverstripe (silverstripe.co.nz) Bad
  • Certificate hostname verification fails.
Catalyst (www.catalyst.net.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is B.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site doesn't redirect to HTTPS.
Spark Digital (gen-i) (www.sparkdigital.co.nz) Bad
  • Nothing is listening on port 443.
MEGA NZ (mega.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A-.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.

NZ ISPs/Telecos

1/6/3
Spark (www.spark.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is B.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site doesn't redirect to HTTPS.
Vodafone (www.vodafone.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A-.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site doesn't redirect to HTTPS.
2Degrees (www.2degreesmobile.co.nz) Bad
  • A verified TLS connection can be established. SSL Labs grade is A.
  • Connection error when connecting to the HTTPS site.
Orcon (www.Orcon.net.nz) Good
  • A verified TLS connection can be established. (SSL Labs report)
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Slingshot (www.slingshot.co.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is C.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
bigpipe (www.bigpipe.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
World Exchange (www.wxc.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is C.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Trustpower (www.trustpower.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is C.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site doesn't redirect to HTTPS.
Callplus (www.callplus.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is C.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
REANNZ (reannz.co.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.

NZ tech conferences

3/3/1
Kiwicon (www.kiwicon.org) Good
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Nethui (2015.nethui.nz) Bad
  • Nothing is listening on port 443.
NZNOG (www.nznog.org) Bad
  • A TLS-related error (None) occurs when trying to connect.
NZpyCon (nzpug.org) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Microsoft Ignite (TechEd) (msignite.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
NZ Gather (gathergather.co.nz) Bad
  • Certificate hostname verification fails.
31 c0n (31c0n.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.

NZ political parties

5/2/0
National (www.national.org.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Labour (campaign.labour.org.nz) Bad
  • A verified TLS connection can be established. SSL Labs grade is A.
  • The HTTPS site redirects to HTTP.
Green Party (www.greens.org.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
NZ First (nzfirst.org.nz) Bad
  • Certificate not trusted by Mozilla cert store.
Maori Party (maoriparty.org) Bad
  • Certificate not trusted by Mozilla cert store.
ACT (www.act.org.nz) Bad
  • Nothing is listening on port 443.
United Future (www.unitedfuture.org.nz) Bad
  • Certificate hostname verification fails.

NZ Retail sites

3/5/4
The Warehouse (www.thewarehouse.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site doesn't redirect to HTTPS.
Countdown (www.countdown.co.nz) Bad
  • A verified TLS connection can be established. SSL Labs grade is A.
  • Connection error when connecting to the HTTPS site.
Yellow Pages (yellow.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Briscoes (www.briscoes.co.nz) Bad
  • A verified TLS connection can be established. SSL Labs grade is A.
  • The HTML page loaded over HTTPS has mixed content.
  • Strict-Transport-Security header is not set.
  • HTTP site doesn't redirect to HTTPS.
Mitre10 (www.mitre10.co.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
PBTech (pbtech.co.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
1-day (www.1-day.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is C.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Grabone (www.grabone.co.nz) Bad
  • A verified TLS connection can be established. SSL Labs grade is A.
  • The HTTPS site redirects to HTTP.
MightyApe (www.mightyape.co.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
Noel Leeming (www.noelleeming.co.nz) Good
  • A verified TLS connection can be established. SSL Labs grade is A+.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is set with a long max-age directive.
  • HTTP site redirects to HTTPS.
PriceSpy (pricespy.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site redirects to HTTPS.
Harvey Norman (www.harveynorman.co.nz) Mediocre
  • A verified TLS connection can be established. SSL Labs grade is A.
  • A page can be successfully fetched over HTTPS.
  • Strict-Transport-Security header is not set.
  • HTTP site doesn't redirect to HTTPS.