Meets the TLS requirements of NIST SP 800-52r2: conformance by government type

Share of applicable sites whose observable TLS configuration meets every technical requirement, against the all-sites benchmark. Cohorts with at least 100 applicable sites.

all sites = 3.9%federal: 32.8; +28.9pp vs all sites = 3.9% (better); n=531 federal +28.9ppstate: 8.6; +4.7pp vs all sites = 3.9% (better); n=326 state +4.7ppNot government: 3.9; −0pp vs all sites = 3.9% (worse); n=971515 Not government −0pplocal: 2.2; −1.7pp vs all sites = 3.9% (worse); n=1055 local −1.7pp
Better than benchmarkWorse than benchmark

Denominator: applicable sites (requirements the scan cannot observe are excluded) · n per cohort in the table

View as table
govTypeAll requirements metMost-failed requirementn
federal32.8%OCSP stapling recommendation is met531
state8.6%OCSP stapling recommendation is met326
Not government3.9%OCSP stapling recommendation is met971,515
local2.2%OCSP stapling recommendation is met1,055

Source: GeoTrust Research — The State of SSL/TLS, October 2026