Skip to main content

Analysis of Federal Executive .govs (Part Deux)

3 min read
: Revisiting 1,229 federal .gov domains three years later to measure SSL, IPv6, CMS adoption, and open data compliance. The results are decidedly mixed.

In September 2011, in response to the Office of Management and Budget releasing a list of all federal executive domains, I built a small tool called Site Inspector and created a quick analysis of the technology and capabilities that power each federal domain.

Nearly three years later, I resurrected that tool, albeit a bit smarter, and, using the latest list, thought I’d take a look at how things have changed in the time since. Efforts like the Digital Strategy and Open Data Policy have surely moved the needle, right? RIGHT?!

The Highlights:

  • Approximately a quarter reduction in number of .govs (1640 - 1229 = 441)
  • 1000 of those domains are live (about 83%, up from 73%)
  • Of those live domains, about 83% are reachable without the www. prefix, a negligible increase
  • Only 64 sites return an AAAA record, the first step towards IPv6 compliance (up from 10)
  • 250 sites, approximately one in four, support SSL (HTTPS), but only one in ten enforce it
  • 87% of sites use no detectable content management system, about a 5% decrease
  • Of those with a CMS, Drupal is still by far the most popular (100+ sites), with WordPress powering 14 sites and Joomla powering 7
  • One in four sites use Google Analytics (almost a three-fold increase), with a handful of sites using Facebook insights
  • Roughly a third of service advertise that they are powered by open source server software (for example, Apache, Nginx), slightly more than those that are powered by closed source server software (for example, Microsoft, Oracle, Sun)
  • 74 sites are still running IIS 6.0, a ten+ year old server
  • HHS is the biggest perpetrator of domain sprawl with 110 domains, followed by GSA (105), Treasury (92), and Interior (89)
  • 142 domains have a /developer page, 171 domains have a /data page, 146 domains have a /data.json page, roughly 15%
  • 16 domains redirect to whitehouse.gov, 10 to justice.gov, 9 to consumerfinance.gov and 8 to usa.gov

Math’s never been my strong point, so I highly encourage you to check my work. You can browse the full results at dotgov-browser.herokuapp.com or check an individual site (.gov or otherwise) at gov-inspector.herokuapp.com.

Please note: This data is to be treated as preliminary and is provided “as is” with no guarantee as to its validity. The source code for all tools used, including the resulting data, is available on GitHub. If you find an error, I encourage you to open an issue or submit a pull request.

Originally published July 7, 2014 View revision history
Share

More to explore

Securing the Status Quo

30 min read

Federal agencies spend billions on IT security, yet rigid compliance frameworks create false safety while stifling innovation against real threats.

Treat Data as Code

5 min read

Developers learned decades ago that version control and collaboration are essential. It's time we apply those same practices to data.

Ben Balter

I'm Ben Balter — I write here about engineering leadership, open source, and showing your work. I was the Director of Hubber Enablement at GitHub, where I helped thousands of GitHubbers do their best remote work. Before this role: Chief of Staff for Security, enterprise PM, and GitHub's first Government Evangelist. Before GitHub: attorney, Presidential Innovation Fellow, and member of the White House's first agile development team. More about the author →

Follow along: Bluesky LinkedIn

This page is open source Help improve this article on GitHub