Eric Mill konklone

## nagw-eric-mill-https-2015.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              1 star
            
          
                konklone
                / nagw-eric-mill-https-2015.md
            
            
              Created
              October 7, 2015 00:33
            
              
                Links and resources from Eric Mill's talk on HTTPS in .gov, given at NAGW 2015.
              
          
    HTTPS for .gov

Talk given by Eric Mill at the National Association of Government Web Professionals (NAGW) 2015 conference in Albuqerque, New Mexico.
Resources


Introduction to HTTPS, by Eric Mill for DigitalGov University
Implementing HTTPS, by Eric Mill for DigitalGov University
https.cio.gov, OMB/GSA hub for HTTPS policy implementation


## subdomains.csv

          
            Domain
            Base Domain
            Base Domain Info
            Redirects Externally
            Redirects To Subdomain
            HTTP Status Code
            Matched Wildcard DNS

            
              pulse.cio.gov
              cio.gov
              General Services Administration
              False
              False
              200
              False

            
              test.pulse.cio.gov
              cio.gov
              General Services Administration
              False
              True
              301
              False

            
              02374039.nps.gov
              nps.gov
              Department of the Interior
              False
              False
              404
              False

            
              nihweb5.cit.nih.gov
              nih.gov
              Department of Health And Human Services
              False
              False
              400
              False

            
              023.nihweb5.cit.nih.gov
              nih.gov
              Department of Health And Human Services
              False
              False
              400
              False

            
              025qgdxr67.abandonedmines.gov
              abandonedmines.gov
              Department of the Interior
              False
              False
              409
              True

            
              abc.025qgdxr67.abandonedmines.gov
              abandonedmines.gov
              Department of the Interior
              False
              False
              409
              True

## index.htm
<!--
  Added by Eric, 2015-07-17.
  Replace all of this on future edits, after the <head> tag.
-->

<!-- Remove the original "Page Title" boilerplate <title> in any future exports. -->
<title>Michelle's Sewing Room</title>

<script>
  (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){

## implementing-https-links.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              1 star
            
          
                konklone
                / implementing-https-links.md
            
            
              Last active
              November 22, 2017 14:55
            
              
                Links used in https://www.digitalgov.gov/event/implementing-https/
              
          
    Links used in Implementing HTTPS, by Gray Brooks and Eric Mill of GSA.
See the recorded presentation on YouTube (1 hour, 40 minutes).
Introduction


https.cio.gov FAQ on HTTPS
Mozilla blog post on deprecating non-secure HTTP
OMB Memorandum M-15-13


## remaining.json
    "C001056": [
        "http://instagram.com/johncornyn"
    ],
    "F000448": [
        "http://www.youtube.com/RepTrentFranks"
    ],
    "G000562": [
        "http://www.youtube.com/channel/UC7Vi5vAFb7piu_BNwrYDBxQ"
    ],
    "L000569": [

## domains-from-legislators.rb
#!/usr/bin/env ruby

require 'yaml'
require 'csv'
require 'uri'

legislators = YAML.load_file("legislators-current.yaml")


CSV.open("house.csv", "w") do |house|

## curl.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                konklone
                / curl.md
            
            
              Last active
              August 29, 2015 14:24
            
              
                Running cURL against ttbonline.gov
              
          
    The below logs are from running cURL on Ubuntu 14.04 LTS, against https://www.ttbonline.gov. The results are the same whether or not --head is used.
Output

Running curl with the default options:
$ curl --head --verbose https://www.ttbonline.gov

* Rebuilt URL to: https://www.ttbonline.gov/


## opm-csid.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                konklone
                / opm-csid.md
            
            
              Created
              June 17, 2015 19:39
            
          
    https://twitter.com/konklone/status/610995950585257984
The URL that OPM is asking employees to type into their browser, https://www.csid.com/opm/, does not use HTTP Strict Transport Security:
$ curl --head https://www.csid.com/opm/

HTTP/1.1 200 OK
Date: Wed, 17 Jun 2015 19:38:20 GMT


## more-mil.csv
arpc.afrc.af.mil
www.uscg.mil
erecruit.nga.mil
arpcmt1.afrc.af.mil
arpcmt2.afrc.af.mil
arpcmt3.afrc.af.mil
mypay.dfas.mil
mypayeaw.dfas.mil
www.fdm.army.mil
52arty-db-002v.afrc.af.mil

## injection.html
<link href="http://connected.southwestwifi.com/unb/unb.css" rel="stylesheet" type="text/css">
<script type="text/javascript" src="http://connected.southwestwifi.com/unb/jqr44-1.8.3.js"></script>
<script type="text/javascript">var r44_btime=new Date();var r44_smu_time=1431575257.040</script>
<script type="text/javascript" src="http://connected.southwestwifi.com/unb/unb.js"></script>
Domain	Base Domain	Base Domain Info	Redirects Externally	Redirects To Subdomain	HTTP Status Code	Matched Wildcard DNS
pulse.cio.gov	cio.gov	General Services Administration	False	False	200	False
test.pulse.cio.gov	cio.gov	General Services Administration	False	True	301	False
02374039.nps.gov	nps.gov	Department of the Interior	False	False	404	False
nihweb5.cit.nih.gov	nih.gov	Department of Health And Human Services	False	False	400	False
023.nihweb5.cit.nih.gov	nih.gov	Department of Health And Human Services	False	False	400	False
025qgdxr67.abandonedmines.gov	abandonedmines.gov	Department of the Interior	False	False	409	True
abc.025qgdxr67.abandonedmines.gov	abandonedmines.gov	Department of the Interior	False	False	409	True
	<!--
	Added by Eric, 2015-07-17.
	Replace all of this on future edits, after the <head> tag.
	-->

	<!-- Remove the original "Page Title" boilerplate <title> in any future exports. -->
	<title>Michelle's Sewing Room</title>

	<script>
	(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]\|\|function(){
	"C001056": [
	"http://instagram.com/johncornyn"
	],
	"F000448": [
	"http://www.youtube.com/RepTrentFranks"
	],
	"G000562": [
	"http://www.youtube.com/channel/UC7Vi5vAFb7piu_BNwrYDBxQ"
	],
	"L000569": [
	#!/usr/bin/env ruby

	require 'yaml'
	require 'csv'
	require 'uri'

	legislators = YAML.load_file("legislators-current.yaml")


	CSV.open("house.csv", "w") do \|house\|
	arpc.afrc.af.mil
	www.uscg.mil
	erecruit.nga.mil
	arpcmt1.afrc.af.mil
	arpcmt2.afrc.af.mil
	arpcmt3.afrc.af.mil
	mypay.dfas.mil
	mypayeaw.dfas.mil
	www.fdm.army.mil
	52arty-db-002v.afrc.af.mil
	<link href="http://connected.southwestwifi.com/unb/unb.css" rel="stylesheet" type="text/css">
	<script type="text/javascript" src="http://connected.southwestwifi.com/unb/jqr44-1.8.3.js"></script>
	<script type="text/javascript">var r44_btime=new Date();var r44_smu_time=1431575257.040</script>
	<script type="text/javascript" src="http://connected.southwestwifi.com/unb/unb.js"></script>