Excellent proposal - procurement vehicles are key

[sjschultze]

This is an excellent idea, and the CIO/GSA team is well-placed to execute. I see great notes in other issues about server configuration, which will be important. In my experience, it will be just as important to untangle the maze of procurement vehicles that agencies use in order to buy hosting from companies like Akamai. Today, some of these may make it difficult to achieve the goals of this project simply because the requirements of this project weren't written into the agreements (not because they aren't technically available). If you can identify those agreements and either modify them or provide alternatives (via Blanket Purchase Agreements (BPAs) or otherwise), I imagine that dozens of gov sites could flip to good HTTPS overnight ("good" meaning HSTS, etc.).