Whoa. http://www.cic.gc.ca doesn't support SSL?! That seems very bad.
For me it redirects to https://www.canada.ca/en/services/immigration-citizenship.html … ?
-
-
If you go to https://www.cic.gc.ca ?
-
No, but if I go to the insecure version of that site, I end up redirected to the secure URL I posted.
-
Oh I see. But at that point a man-in-the-middle attack could have already sent you elsewhere.
-
Use of HSTS is also mandatory. Doesn't appear to be implemented here. https://www.canada.ca/en/treasury-board-secretariat/services/information-technology/policy-implementation-notices/implementing-https-secure-web-connections-itpin.html …
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.