The HTTPS-Only Standard for federal domains (M-15-13), and implementation guidance. - View it on GitHub