cisagov/pshtt

View on GitHub

Scan domains and return data based on HTTPS best practices

Stars: 693
Forks: 91
Open beginner issues: 0
Indexed issues: 27

Dominant language: Python
License: CC0-1.0
Last GitHub push: Aug 6, 2026
Latest indexed: Sep 15, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed
PR merge metrics: No merged PRs in 30d

Open All

27 open issues indexed

Use more formal/complete HSTS parser Open

bug

cisagov/pshtt#12 · 7 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Possible (long standing) bugs in logic to review Open

cisagov/pshtt#13 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Outputs should include the values when HTTPS {Bad Chain, Bad Hostname, Expired Cert} are TRUE Open

cisagov/pshtt#14 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Unit tests for HTTP endpoints Open

cisagov/pshtt#17 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Distinguish incomplete chains from untrusted roots Open

cisagov/pshtt#25 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
If the domain is not reachable over HTTP, canonical URL should be blank Open

cisagov/pshtt#34 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Consider factoring in meta refresh tags when calculating redirects Open

cisagov/pshtt#52 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Potential bug on canonical URL detection Open

cisagov/pshtt#54 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Logic issue with is_redirect method Open

bug

cisagov/pshtt#66 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Factor in redirects when calculating HSTS Open

cisagov/pshtt#89 · 16 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Move utils.format_domains call into main pshtt lib Open

cisagov/pshtt#133 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
'Valid HTTPS' key-value inconsistent across platforms Open

bug

cisagov/pshtt#149 · 17 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
pip install on amazonlinux docker container Open

cisagov/pshtt#173 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Cannot trace back urllib3.connection function invocation Open

cisagov/pshtt#185 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
HSTS not checked at both https endpoints Open

cisagov/pshtt#194 · 1 comment · 0 reactions · 2 assignees · Indexed Sep 15, 2026
Other requests response exception Open

bug

cisagov/pshtt#195 · 2 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
HSTS max-age discrepancy Open

bug

cisagov/pshtt#196 · 2 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Sometimes returns None for Valid HTTPS Open

bug

cisagov/pshtt#198 · 3 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Need more exhaustive check to determine if an HSTS header will be ignored Open

cisagov/pshtt#205 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
How should we handle HSTS headers and HTTP redirects in the redirect chain? Open

cisagov/pshtt#206 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Incorrect calculation for "Enforces HTTPS" Open

cisagov/pshtt#207 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Installation fails due to conflicting cryptography version Open

cisagov/pshtt#208 · 6 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Sslyze version incompatibility Open

cisagov/pshtt#209 · 2 comments · 2 reactions · 0 assignees · Indexed Sep 15, 2026
Idea: Validate Certificate Transparency Logs Open

cisagov/pshtt#212 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Problems with hstspreload.org Open

bug

cisagov/pshtt#241 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Option to check a specific port, port pool, port range, or all ports Open

cisagov/pshtt#242 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
BOD 18-01 Compliance Discrepancies Open

bug

cisagov/pshtt#258 · 2 comments · 0 reactions · 2 assignees · Indexed Sep 15, 2026

cisagov/pshtt

Get new issues in your inbox