SSL page

[Jamie Jenkins]

Disclaimer: I'm not a web developer and have only the basic level concepts.

We are preparing to move forward on utilizing statuspage.io and a part of this will be to embed the content page into our existing SSL-based pages.

I will need to discuss this with our InfoSec and web developers, and they will want more detailed information than I can describe. A concern of theirs will be embedding a non-SSL page within our corporate SSL pages I'm sure.

Are there any documents I can send to the teams to better describe the methods and security?

[Nick Coates · Accepted solution]

Hi Jamie,

Everything with Statuspage is encrypted via SSL/TLS, from frontend UI to API calls. I manage the Broadcom page and I came from the Symantec acquisition. As you can imagine, Symantec being a security company, Statuspage went through a lot of security and we deemed everything is safe, specifically as Atlassian has many accreditation from ISO 27001 to SOC2 compliance.

However I'm not completely sure what you mean by incorpating into your company-based SSL website? Do you mean using the embed widget?

I highly recommend sharing this page with your InfoSec team: https://www.atlassian.com/trust

I'm an Enterprise customer so we have a dedicated CSM so I would normally field these questions there. Alternatively if you are a paid customer you could try contacting Support.

Thanks,
Nick

[Nic Brough -Adaptavist- · Accepted solution]

I'm a little stuck - I am not aware of any part of Statuspage that is not served over SSL.

I've always used https to use Statuspage and when I've tried to use http://statuspage-url-I-know-exists, it always redirects me to the https page (as does my own website, with two simple lines of apache config)

What non-SSL page are you working with?

[Jamie Jenkins]

Hey Nic,

Apologies on my end - I probably am not constructing my question correctly.

Is there documentation that I can pass along to my InfoSec and web development team to give them the information they need to incorporate my statuspage.io into the company-based SSL website?

[Nic Brough -Adaptavist-]

I don't think there is any documentation for that - you have a statuspage site, if you want to incorporate it into another site, then you need to do things with that site to draw it in, all you need from statuspage is the url your statuspage is running on.