Important
Dear Mozilla Observatory Users,
This code repository is now deprecated. There is a Node/Javascript based replacement available, that has updated scoring and backs the HTTP Observatory service on MDN.
- No Further Updates: We will no longer be providing updates, bug fixes, or new features for this repository.
- Limited Support: Official support will be discontinued.
- Archival: The repository will be archived soon, making it read-only.
🔍 Alternatives and Recommendations
We recommend transitioning to HTTP Observatory, maintained by MDN.
📦 Migration Guide
To assist you in transitioning, we have prepared a Migration Guide that covers steps to migrate your existing setup to the alternative.
The Mozilla Observatory is a set of tools to analyze your website and inform you if you are utilizing the many available methods to secure it.
It is split into three projects:
- http-observatory - scanner/grader
- http-observatory-cli - command line interface
- http-observatory-website - web interface
TLS evaluation relies on external scanners, such as Mozilla's TLS Observatory.
If you just want to use a local version of the website, you can simply clone the dist directory:
$ git clone -b gh-pages https://github.com/mozilla/http-observatory-website.git
However, it comes with a built-in web server that will automatically regenerate the SRI hashes:
$ npm install
$ npm run watch
Note that this will still use the global Mozilla Observatory API endpoints; you will need to change httpobs.js
and
httpobs-third-party.js
if you wish to use your own local endpoints.
- April King
- Mozilla Public License Version 2.0