Internetkollen is a service from the Swedish Internet Foundation that helps you test whether websites and email servers use modern standards - and shows how any shortcomings can be addressed. By making standards common practice, we create a more robust internet for everyone, while also helping you protect your own operations from risks that outdated protocols can’t handle.

Health status

How is Sweden’s internet doing? We monitor the web and email configurations of Sweden’s most important online services. We test Swedish domains and score how well standards are followed. A domain can receive between 0 and 100 points.

Internetkollen uses a measurement engine developed in a Dutch collaborative project. A range of internet organizations have jointly defined a series of tests that can perform a broad technical assessment of web and email services.

Internetkollen is operated by the Swedish Internet Foundation, an independent, public-benefit organization. We work to ensure that the internet contributes positively to people and society.

To learn more about the Swedish Internet Foundation, visit our website.

Internetkollen uses a measurement engine developed in a Dutch collaborative project . A number of different internet organizations have jointly developed a series of tests that can perform a broad technical assessment of web and email services.

When Internetkollen runs a test, we initiate a number of requests from our test server to the servers responsible for delivering the domain and services being tested.

For websites, we test the following parameters

IPv6: Is the service reachable via a modern IP address?

DNSSEC: Is the domain name signed?

HTTPS: Is the connection encrypted and secure?

Security options: Are the security headers correctly configured?

RPKI: route authorisation?

For email services, we test the following parameters

IPv6: Is the service reachable via a modern IP address?

DNSSEC: Is the domain name signed?

DMARC, DKIM and SPF: Is the service protected against phishing?

STARTTLS and DANE: Is the connection secure and encrypted?

RPKI: route authorisation?

Standards and scoring

The Internet.nl measurement engine checks the (correct) implementation of modern internet standards that improve the reliability of online services. A result of 100% means that a website or email service meets the test standard. This standard is based on the list of open standards that are mandatory for government agencies in the Netherlands and maintained by the Netherlands Standardisation Forum, on the security recommendations from NCSC-NL, and on relevant RFCs from the IETF.

Does a result of 100 points mean that all mandatory internet standards are met?

Note that a result of 100 points does not necessarily mean that all internet standards are met. This is because not all mandatory internet standards are tested (fully), partly because it is sometimes impossible or very difficult. In addition, some internet standards may be tested but not yet included in the scoring.

Will the standards be adjusted?

The test standards for Internet.nl will be adjusted over time as the state of technology evolves. Updates are announced through news articles on internet.nl's website . New subtests do (usually) not affect the score upon initial publication and are given the status 'RECOMMENDED' or 'OPTIONAL'. In the future, these new items may be assigned the status 'REQUIRED' and be included in the overall score.

How does the result relate to security?

Although many of the tested internet standards contribute to a higher level of security for your website or email service, a result of 100 points does not mean that an online service is completely secure. There are additional aspects that are important for the security of your online services, but these fall outside the scope of the tests. Keep in mind that Internetkollen is intended as a test of standards compliance, not a security test.

How is the test report structured?

Internetkollen includes two main tests: for websites and for email services. These main tests consist of test categories that contain subtests. For example, one of the main tests is the website test, which includes a test category for HTTPS with a subtest for HSTS.

A subtest can have one of the following three requirement levels (in accordance with RFC 2119):

• REQUIRED ("must")
• RECOMMENDED ("should")
• OPTIONAL ("may")

When a subtest has the status 'RECOMMENDED' or 'OPTIONAL', this is indicated in the test explanation.

How is the percentage score calculated?

• Each main test results in an overall percentage score.
• Each test category within a main test is weighted equally in the overall percentage score. So if a main test consists of five test categories, the maximum score for each category is 20%.
• Only subtests with the status 'REQUIRED' are included in the score for a test category and in the overall percentage score.

See Internet.nl’s documentation on scoring for more information.

Internetkollen is a tool developed to help Sweden’s internet ecosystem create more secure and stable services. If you have suggestions for improving the service, we would be happy to receive them!

Email us at info@internetstiftelsen.se