SSL page

Question

Disclaimer: I'm not a web developer and have only the basic level concepts.

We are preparing to move forward on utilizing statuspage.io and a part of this will be to embed the content page into our existing SSL-based pages.

I will need to discuss this with our InfoSec and web developers, and they will want more detailed information than I can describe. A concern of theirs will be embedding a non-SSL page within our corporate SSL pages I'm sure.

Are there any documents I can send to the teams to better describe the methods and security?

Nic Brough -Adaptavist- · Accepted Answer

I'm a little stuck - I am not aware of any part of Statuspage that is not served over SSL.

I've always used https to use Statuspage and when I've tried to use http://statuspage-url-I-know-exists, it always redirects me to the https page (as does my own website, with two simple lines of apache config)

What non-SSL page are you working with?

Nick Coates · Accepted Answer

Hi Jamie,

Everything with Statuspage is encrypted via SSL/TLS, from frontend UI to API calls. I manage the Broadcom page and I came from the Symantec acquisition. As you can imagine, Symantec being a security company, Statuspage went through a lot of security and we deemed everything is safe, specifically as Atlassian has many accreditation from ISO 27001 to SOC2 compliance.

However I'm not completely sure what you mean by incorpating into your company-based SSL website? Do you mean using the embed widget?

I highly recommend sharing this page with your InfoSec team: https://www.atlassian.com/trust

I'm an Enterprise customer so we have a dedicated CSM so I would normally field these questions there. Alternatively if you are a paid customer you could try contacting Support.

Thanks,
Nick