Gannett · Domain Security

Gannett Domain Security

Domain security

Domain security posture for Gannett, probed live across 4 host(s) and 4 registrable domain(s). 4 host(s) serve HTTPS (up to TLSv1.3); 2 advertise HSTS. Email/DNS controls: DNSSEC absent, SPF present, DMARC present (p=none).

MediaNewsPublishingJournalismDigital MarketingAdvertisingLocal MarketingContent

Transport & Host Security

www.usatodayco.com
HTTPS: yes · TLS: TLSv1.3 · HSTS: no · cert expires: Sep 22 11:43:22 2026 GMT
www.gannett.com
HTTPS: yes · TLS: TLSv1.3 · HSTS: no · cert expires: Oct 27 22:59:50 2026 GMT
www.usatoday.com
HTTPS: yes · TLS: TLSv1.3 · HSTS: yes · cert expires: Oct 31 06:54:24 2026 GMT
localiq.com
HTTPS: yes · TLS: TLSv1.3 · HSTS: yes · cert expires: Sep 30 10:19:16 2026 GMT

Domain (DNS/Email) Security

usatodayco.com
DNSSEC: no · SPF: yes · DMARC: yes (p=none) · CAA: yes
gannett.com
DNSSEC: no · SPF: yes · DMARC: yes (p=none) · CAA: none
usatoday.com
DNSSEC: no · SPF: yes · DMARC: yes (p=none) · CAA: none
localiq.com
DNSSEC: no · SPF: yes · DMARC: yes (p=none) · CAA: none

Source

Domain Security

gannett-domain-security.yml Raw ↑ 
generated: '2026-08-13'
method: probed
source: live DNS/TLS/HTTP probes of every Gannett / USA TODAY Co. / LocaliQ host in apis.yml
note: >-
  0-working/probe-domain-security.py covers the single Website host; the remaining three
  hosts were probed by hand with the same checks (HTTP HEAD for HSTS, openssl s_client for
  TLS version and cert expiry, dig for DS/CAA/TXT). www.gannett.com is retained because it
  still serves the 301s into www.usatodayco.com.
hosts:
  - host: www.usatodayco.com
    role: corporate site
    https: true
    tls_version: TLSv1.3
    cert_expires: Sep 22 11:43:22 2026 GMT
    hsts: false
  - host: www.gannett.com
    role: legacy corporate host, 301s to www.usatodayco.com
    https: true
    tls_version: TLSv1.3
    cert_expires: Oct 27 22:59:50 2026 GMT
    hsts: false
  - host: www.usatoday.com
    role: flagship consumer property
    https: true
    tls_version: TLSv1.3
    cert_expires: Oct 31 06:54:24 2026 GMT
    hsts: true
    hsts_max_age: 63072000
  - host: localiq.com
    role: LocaliQ digital marketing services
    https: true
    tls_version: TLSv1.3
    cert_expires: Sep 30 10:19:16 2026 GMT
    hsts: true
    hsts_max_age: 2592000
    hsts_include_subdomains: true
domains:
  - domain: usatodayco.com
    dnssec: false
    caa:
      - 0 issue "letsencrypt.org"
      - 0 issue "www.digicert.com"
      - 0 issue "amazon.com"
    spf: true
    dmarc: true
    dmarc_policy: none
  - domain: gannett.com
    dnssec: false
    caa: []
    spf: true
    dmarc: true
    dmarc_policy: none
  - domain: usatoday.com
    dnssec: false
    caa: []
    spf: true
    dmarc: true
    dmarc_policy: none
  - domain: localiq.com
    dnssec: false
    caa: []
    spf: true
    dmarc: true
    dmarc_policy: none
summary:
  https_everywhere: true
  tls13_everywhere: true
  hsts_hosts: 2
  hsts_missing: [www.usatodayco.com, www.gannett.com]
  dnssec_domains: 0
  caa_domains: 1
  dmarc_enforcing: 0
  note: >-
    All four domains publish SPF with a -all hard fail and a DMARC record, but every DMARC
    policy is p=none — monitoring only, no enforcement. Only the new corporate domain
    (usatodayco.com) publishes CAA; the flagship consumer domain usatoday.com does not, and
    no domain is DNSSEC-signed. The corporate hosts are the only ones without HSTS.