2024-09-24
Webbkoll is now run by the 5th of July Foundation, a Swedish foundation devoted to protecting human rights online by providing internet users with concrete tools. Dataskydd.net, the NGO that developed Webbkoll and ran it between 2015 and 2024, was dissolved earlier this year. We thank them for their important work!
Note that anyone can setup Webbkoll on their own server. The code is available on Codeberg.
2023-01-11
Added a dark color theme contributed by Jean-Luc Tibaux. Thanks!
Removed testing of, and mention of, the now-deprecated Expect-CT header.
A while ago we switched from using a custom icon font to simply using Unicode emojis (nothing newer than Unicode's Emoji 1.0 from 2015, I believe). Nobody's complained; seems to work OK.
2022-11-18
We've moved our repositories from GitHub to Codeberg. Thanks Lukas2112 for the encouragement.
2022-09-01
Thanks to Albano Battistella, Webbkoll is now available in Italian!
2021-11-11
Removed geolocation information (estimated country) because the information is too unreliable, especially with CDNs.
2021-10-03
Webbkoll no longer recommends setting the X-Frame-Options header. It is obsoleted by the Content Security Policy directive frame-ancestors, which should be used instead. Thanks Rohan Kumar.
2021-07-01
Webbkoll no longer recommends enabling X-XSS-Protection. Read more about it.
2020-06-26
Webbkoll now checks if reports are sent to third-parties with Content Security Policy's report-uri / report-to, Expect-CT's report-uri, and NEL's report-to. Thanks InfoSec Handbook for the suggestion and comments.
2019-05-24
Thanks to Tom Fredrik Blenning - Elektronisk Forpost Norge, Webbkoll is now available in Norwegian!
2019-01-15
We could not find any website that 1) had the consolidated version (i.e., with corrections incorporated) of the GDPR including the recitals, 2) provided it in all 24 EU languages, and 3) made it easy to link to individual articles/recitals. So we hacked together one ourselves: https://gdpr.dataskydd.net/. It's now used for the GDPR references on the Results page.
EUR-Lex does provide a consolidated GDPR, but it doesn't include the recitals (which also received corrections!). Additionally they don't make it easy to link to individual articles, unless you dig for IDs in the HTML source. So we took the XML versions of the consolidated GDPR, added the recitals, and manually applied the corrections to the recitals. All XML files and everything used to generate our GDPR site is available on GitHub (beware: lots of ugly XSLT). Please report any mistakes.
2019-01-11
Thanks to Tomas Jakobs, Webbkoll is now available in German!
2018-11-30
New version of Webbkoll launched, thanks to a small grant from Digital Rights Fund. Changes/additions:
- Redesigned a bit to hopefully make things a bit more clear and navigable. Better separation between results and general information/advice. Separate boxes for "what is this" and "how do you do this". Hide some things between expandable text boxes. Now works better on mobile.
- Added Content Security Policy (CSP) analysis, Subresource Integrity (SRI) analysis, and improved X-Content-Type-Options/X-Frame-Options/X-XSS-Protection/HSTS checks. This code was ported from Mozilla's Observatory.
- More cooke information shown (HttpOnly, Secure, SameSite)
- localStorage usage shown
- IP address and country (with flags!) shown for every third-party host
- Chromium's security state information shown
- Information/technical advice rewritten (sometimes quoted from MDN)
- Many references to relevant articles and recitals in the GDPR added
- Lots of work to make things a bit cleaner internally
- You can now help translate Webbkoll! We hope to add a few more languages, such as French and German, soon.