Skip to content
Super Site Report logo Super Site Report Website health checker

iana.org website health report

Website health report

iana.org scores 91/100

Excellent — only minor polish left. We found 12 issues; the weakest area is SEO (79/100).

Last checked · 1 scan

  • 5 Medium
  • 7 Low
  • 29 Passed
Re-scan iana.org Download PDF

Free expert review

Send this report to SuperSiteBros. An expert will look it over and email you with the highest-impact fixes — no obligation.

Free weekly monitoring

Weekly monitoring is built and ready, but outbound email from this server is not reliable yet (no SPF/DKIM/DMARC and no SMTP). Sign-ups stay closed until that is fixed — use the free expert review above in the meantime.

Matched SuperSiteBros services

Based on the categories that need work. Prices are from supersitebros.com.

SSL / mixed content fix$79 one-time

Eliminate mixed-content warnings and force HTTPS properly.

View on SuperSiteBros →Super Plan$99/month

Everything in Starter, plus weekly backups, security scans and performance optimizations.

View on SuperSiteBros →

Site crawl

Pages crawled
25
Broken links
0
Redirect chains
0
Missing titles
0
Duplicate titles
0
Missing descriptions
24
Missing H1
0
Thin pages
1
Noindex pages
0
Mixed content pages
0

We crawled the first 25 pages; larger sites have more.

Pages checked
PageStatusTitleWordsIssues
/200Internet Assigned Numbers Authority181no description, thin
/about200About us414no description
/domains200Domain Name Services345no description
/domains/root200Root Zone Management300no description
/domains/root/db200Top-Level Domains8671no description
/domains/int200Intergovernmental Treaty (.INT) Domains268no description
/domains/arpa200.ARPA Domain441no description
/domains/idn-tables200Repository of IDN Practices11824no description
/numbers200Number Resources423no description
/help/abuse200Network Abuse Information465no description
/protocols200Protocol Registries37906no description
/protocols/apply200Protocol Registry Change Processes265no description
/time-zones200Time Zones319no description
/numbers/registries200Number-related Registries338no description
/numbers/allocations/200RIR Allocation Data249no description
/news200News5992no description
/performance200Performance247no description
/about/organization200The Organization214no description
/archive200Archive253no description
/contact200Contact Us123no description, thin
/about/governance200Governance444no description
/about/oversight200Oversight393no description
/about/planning200Strategy and Planning406no description
/about/excellence200Continuous Improvement476no description
/about/audits200Audit Programs648no description

Issues to fix on iana.org

MediumPage language not declaredAccessibility

The html element has no lang attribute.

Why it matters

Screen readers use the lang attribute to pick the right voice and pronunciation; translation tools use it too.

How to fix it

Add a lang attribute to the <html> tag, e.g. `<html lang="en">`.

MediumHTTP does not redirect to HTTPSSecurity

http://www.iana.org/ returned 200 without redirecting.

Why it matters

Visitors (and links) that use http:// get an unencrypted copy of the site. Search engines may also index both versions as duplicates.

How to fix it

Add a permanent (301) redirect from every http:// URL to the same https:// URL at the server or CDN level.

MediumMissing meta descriptionSEO

No meta description tag found.

Why it matters

The meta description is your pitch in search results. Without one, Google picks a random snippet, which usually earns fewer clicks.

How to fix it

Write a unique 120–160 character summary that tells searchers why to click.

MediumNo XML sitemap foundSEO

Checked robots.txt, /sitemap.xml, /sitemap_index.xml and /wp-sitemap.xml.

Why it matters

A sitemap lists the pages you want indexed and when they changed, helping search engines find new and deep pages faster.

How to fix it

Generate an XML sitemap, reference it in robots.txt and submit it in Google Search Console and Bing Webmaster Tools.

MediumPages without meta descriptionsSEO

24 of 24 other indexable page(s) have no meta description.

Why it matters

Google will pick its own snippet for these pages, which usually earns fewer clicks.

How to fix it

Add a 120–160 character description to your important pages.

Affected pages

  • /about
  • /domains
  • /domains/root
  • /domains/root/db
  • /domains/int
  • /domains/arpa
  • /domains/idn-tables
  • /numbers
  • /help/abuse
  • /protocols
  • /protocols/apply
  • /time-zones
  • /numbers/registries
  • /numbers/allocations/
  • /news
  • …and 9 more
LowNo security.txt fileBest practices

/.well-known/security.txt was not found (or has no Contact: line).

Why it matters

security.txt (RFC 9116) tells researchers how to report a vulnerability to you instead of disclosing it publicly or not at all.

How to fix it

Publish /.well-known/security.txt with at least a `Contact:` and an `Expires:` line.

LowCSP allows unsafe inline scriptsSecurity

script-src: 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com

Why it matters

With 'unsafe-inline' in script-src (and no nonce, hash or strict-dynamic), injected <script> tags still run, so the policy gives little XSS protection.

How to fix it

Replace 'unsafe-inline' with per-request nonces or script hashes, ideally with 'strict-dynamic'.

LowNo Permissions-PolicySecurity

No Permissions-Policy header.

Why it matters

Permissions-Policy switches off powerful browser features (camera, microphone, geolocation, payment…) that your site doesn’t use, so injected or third-party code can’t use them either.

How to fix it

Send e.g. `Permissions-Policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()`, allowing only what you need.

LowMissing Open Graph tagsSEO

Missing: og:title, og:description, og:image.

Why it matters

Open Graph tags control the title, description and image when your page is shared on Facebook, LinkedIn, Slack, iMessage and others. Without them, shares look bare or pick a random image.

How to fix it

Add og:title, og:description, og:image (1200×630) and og:url.

LowNo structured dataSEO

No JSON-LD or microdata found.

Why it matters

Structured data (schema.org JSON-LD) helps search engines understand your organisation, articles, products or FAQs and can unlock rich results.

How to fix it

Add JSON-LD for your organisation/website, plus the type that fits each page (Article, Product, LocalBusiness…). Check it with Google’s Rich Results Test.

Lowrobots.txt doesn’t list a sitemapSEO

No “Sitemap:” line in robots.txt.

Why it matters

The Sitemap line is how crawlers that you haven’t submitted to (Bing, others) find your sitemap.

How to fix it

Add `Sitemap: https://yourdomain/sitemap.xml` (absolute URL).

LowThin pagesSEO

1 page(s) have fewer than 200 words of visible text.

Why it matters

Pages with very little unique text rarely rank and can drag down how search engines judge the site’s overall quality.

How to fix it

Expand them with genuinely useful content, merge similar pages, or noindex utility pages.

Affected pages

  • /contact (123 words)
InfoNot ready for the HSTS preload listSecurity

For preload the header still needs: includeSubDomains.

Why it matters

Preloading bakes your domain into browsers as HTTPS-only, protecting even the very first visit. It’s optional and hard to undo, so only do it once every subdomain supports HTTPS.

How to fix it

Serve `max-age=31536000; includeSubDomains; preload` on the root domain, redirect http→https on the same host first, then submit at hstspreload.org.

InfoDMARC is monitor-only (p=none)Security

DMARC record: v=DMARC1; p=none;fo=1; rua=mailto:tutnr7vw@ag.us.dmarcian.com; ruf=mailto:dmarc-ruf@iana.org;

Why it matters

p=none collects reports but doesn’t stop spoofed mail from being delivered.

How to fix it

Once reports show your legitimate mail passes, move to `p=quarantine`, then `p=reject`.

Passed checks (29)
  • Valid SSL certificate — Trusted certificate for www.iana.org, valid until 2027-01-17 (82 days left), issued by Google Trust Services.
  • HSTS enabled — Strict-Transport-Security: max-age=48211200; preload
  • Clickjacking protection — X-Frame-Options: DENY
  • MIME sniffing disabled — X-Content-Type-Options: nosniff
  • Referrer-Policy set — same-origin
  • No mixed content — Every resource referenced in the HTML uses https://.
  • Fast server response — Time to first byte 0.04s.
  • Brotli compression — Content-Encoding: br
  • HTTP/2 and HTTP/3 supported — Served over HTTP/2 and advertises HTTP/3 (QUIC) via Alt-Svc.
  • Lean HTML — The HTML document is 6.1 KB.
  • Few render-blocking resources — 1 blocking script(s), 1 stylesheet(s).
  • Static files are cacheable — 4 sampled CSS/JS files have long cache lifetimes.
  • Page loads successfully — HTTP 200 after 1 redirect(s).
  • Page is indexable — No noindex directive in meta robots or X-Robots-Tag.
  • Good page title — “Internet Assigned Numbers Authority” (35 characters).
  • One clear H1 — “Internet Assigned Numbers Authority”
  • Canonical URL set — https://iana.org/
  • Mobile viewport set — width=device-width, initial-scale=1
  • robots.txt allows crawling — 1 rule group(s).
  • Missing pages return 404 — A made-up URL returned 404.
  • One preferred hostname — iana.org redirects (301) to the preferred version.
  • Links and buttons have names
  • Logical heading structure — 4 headings in order.
  • Standards-mode HTML5 document — Doctype and charset are declared.
  • SPF record present — v=spf1 redirect=icann.org
  • CAA records restrict certificate issuance — iodef mailto:caa-reports@icann.org; issue digicert.com; issue letsencrypt.org; issue pki.goog
  • Reachable over IPv6 — www.iana.org has an AAAA record.
  • No broken links found — Checked 25 page(s) and 60 linked URL(s).
  • Page titles are unique — Across 25 crawled page(s).

Site facts

Final URL
https://www.iana.org/
HTTP status
200
Server response (TTFB)
40 ms
Protocol
HTTP/2 · HTTP/3 advertised
Compression
br
HTML size
6.1 KB
DOM elements
122
Words on page
181
Certificate
Valid, 82 days left (Google Trust Services)
Email DNS
SPF ✓ · DMARC ✓ · CAA ✓ · IPv6 ✓
Server
cloudflare

Technology detected

  • Cloudflare

Want these fixed for you?

SuperSiteBros care plans take care of security hardening, speed, updates and monitoring so your grade stays high.

See care plans

This report was generated automatically from public information. How we score sites · Own this site? Request removal