US CIO HTTPS-Only Standard. Has great best practice info. https://https.cio.gov/Bruce MortonMar 26, 2015