Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.DRedirect ChainAction2 redirect(s), 1754 ms totalFIX
https://byu.edu
680 ms · HTTP/1.1
http://www.byu.edu/
513 ms · HTTP/1.1
https://www.byu.edu/
561 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://byu.edu | 301 | 680 ms | HTTP/1.1 | Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k |
| 2 | http://www.byu.edu/ | 301 | 513 ms | HTTP/1.1 | Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k |
| 3 | https://www.byu.edu/ | 200 | 561 ms | HTTP/1.1 | istio-envoy |
See the visual redirect chain in the HTTP Probe tab →
Each redirect adds latency. Try to minimize the chain to 1 hop.
Redirect chain — each hop adds latency; combine into one redirect where possible.
Source: Google Search Central / web.dev
Redirect directly from https://byu.edu to https://www.byu.edu/
Redirect chain could be flattened to one hop — server config tweak removes intermediate latency.
Source: web.dev
DCDN & DeliveryActionNo CDN detectedFIX
Consider using a CDN to improve global delivery speed and reduce origin load.
CIPv6 ReadinessActionNo IPv6 supportREVIEW
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.
Source: Google IPv6 stats
BURL Variantswww/non-www, trailing slash, HTTP→HTTPSREVIEW
www / non-www
Inconsistent — duplicate content risk
HTTP → HTTPS
Consistent
BTLS Certificate Expiry & Recommendations232 days until leaf cert expires — 4 issues to addressREVIEW
Certificate validity
Recommended actions
- Extend HSTS max-age to at least 31536000 (1 year) to meet the preload list criteria
- Add includeSubDomains to the HSTS directive
- Enable DNSSEC on your domain for DNS spoofing protection
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
ADNS Records1 A records, 1082 ms lookupPASS
| A | 128.187.16.184 |
| AAAA | — |
| CNAME | — |
| NS | edns3.byu.edu, edns2.byu.edu, edns1.byu.edu |
| MX | 1 byu-edu.mail.protection.outlook.com |
| TXT | atlassian-domain-verification=aDsuwnyBL1ddPEmxnhkE6PTt4+lSv4WY4FKtCLZUa77pF07wdQ... autodesk-domain-verification=MIOaDjBrtlr753lNSHVe atlassian-domain-verification=hYvT8QCs1bn5HDKsX2RRR6lriobxusFJKIxA97eZucGlt9unT4... _0uwooy72mqa0w1vklbtomecry2gcpwb cisco-ci-domain-verification=78c0369a65237eb78ca3c58812ce575159caf0da32d5a792b95... _c8srpnd0f5t7xwmvxao8rxo8zqcfarn ICZR0bPJemxbJquJXW6LHHbWVSl4OUQuHxdgXjK8qqqievXVhOsE00kxwlg80ePZ559IMcemo6DKXw1i... SPF v=spf1 include:_SPF_campus.byu.edu include:spf.protection.outlook.com include:sp... adobe-idp-site-verification=b03f3d3e-1329-430e-bcc6-bf452bb68c89 onetrust-domain-verification=436f0c9b36b0442f8883d778f08346c3 vc-domain-verify=product.byu.edu,6e7076caa22d4f593bb7 36c78116-6425-41b6-98a7-c86a96459c8a google-site-verification=BHkPtVBpmJKuve50t_5YQ7dJb4su9MRlhFRVoxgKgZE yahoo-verification-key=jn27IS/hdtoKZL+5f+0qihF5zqxZhydb/ncjJdbVrqQ= postman-domain-verification=01248ec7528757fdebbce178d911c4a797e5ef5f21bc3dd41d8f... xb0ljjxpxdzm5cw76lfzy6csmyp5x09p facebook-domain-verification=nwpifn63vpc9b3pc2rfy5s1rc4ek1b globalsign-domain-verification=2A8AEBCF963BB538FFD5D388B0670FEA jamf-site-verification=d5Vug5Jg59q5naZ-Pad7ig 3315c9b8dfd44a38a2eeed91f6d5d221 google-site-verification=8zGJEsovwgTD1bwv1Swbmp477V1knuZM_33hsTDE6AI ie3BiyIR9Ivt635cDBbRDEcz7BnqC0MUw9ylH5jZF8LioAegVDyNtytWgUH0iiHUa5p6cCdmM1PzjbLP... apple-domain-verification=8zoFQifLRHAQudx9 Dynatrace-site-verification=e572fc1f-0723-4c78-b28d-fb0c25c401d0__k2qi58b2d6c993... globalsign-domain-verification=4278688C391AC8A6DC0E2291B7E4B067 smartsheet-site-validation=Q-o-r_6cWWqe8hcfgLTUWcceLzr4kNFo MS=ms62417976 parallels-domain-verification=1b2bd9daaa8b477cb2c9841efb50d8b8cefd6a8064234c55a0... adobe-sign-verification=d96a5bf1dd068d6c8e000701b91a0e4d |
| CAA | Lookup not available with standard resolver |
Multiple A records provide failover if one server goes down.
Single A record means a single point of failure — if that IP goes down, your site is unreachable until DNS TTL expires.
Learn more ▾ ▴
Add multiple A records for round-robin failover, or use a managed DNS provider with health-checked failover (Route 53, Cloudflare, NS1). Short TTL (60-300s) lets clients recover faster on outages.
Source: SRE practice / DNS architecture
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
Slow DNS adds latency to every page load. Consider a faster DNS provider.
DNS resolution is slow — anycast DNS providers (Cloudflare, Route 53) typically resolve <50ms globally.
Source: DNS performance benchmarks
A+Crawlabilityrobots.txt present, sitemap with 12 URLsPASS
Add a 'Sitemap:' directive to robots.txt so search engines can discover your sitemap.
robots.txt omits Sitemap: directive — crawlers must fetch /sitemap.xml by convention; reliable but missing the explicit hint.
Source: sitemaps.org
User-agent: *
Crawl-delay: 10
- https://www.byu.edu/sitemap-201908.xml
- https://www.byu.edu/sitemap-202003.xml
- https://www.byu.edu/sitemap-202008.xml
- https://www.byu.edu/sitemap-202101.xml
- https://www.byu.edu/sitemap-202206.xml
- https://www.byu.edu/sitemap-202302.xml
- https://www.byu.edu/sitemap-202307.xml
- https://www.byu.edu/sitemap-202408.xml
- https://www.byu.edu/sitemap-202504.xml
- https://www.byu.edu/sitemap-202506.xml
- https://www.byu.edu/sitemap-202509.xml
- https://www.byu.edu/sitemap-latest.xml
A+Domain Intelligencebyu.edu — 39 years, 9 months old, hosted on BYU - Brigham Young University, USPASS
776 days
July 31, 2028
232 days
Issued by DigiCert Inc
39 years, 9 months
Registered January 19, 1987
Status unknown
Protects against DNS spoofing
BYU - Brigham Young University, US
ASN AS6510
128.187.16.184
Registrar unknown