kanta.fi

HTML metadata

Title

Kanta.fi - Kanta.fi

Description

Kanta tuottaa sosiaali- ja terveydenhuollon digitaalisia palveluja, jotka hyödyttävät kansalaisia sekä sosiaali- ja terveydenhuollon toimijoita.

Language

fi-FI

Translations

en
sv

Technology

Stack: Java

Third-party hosts loaded (1)

chattirobottipalvelu.kela.fi×1

Social

DNS records live

NS

ns-fi.elisa.net
ns-se.elisa.net
ns1.z.fi
ns2.z.fi

MX

0 mx.kela.fi

Verified for

Google
Meta
Microsoft 365

Email authentication strong

SPF

v=spf1 ip4:91.223.107.0/24 ip4:185.74.174.132 ip4:188.95.96.121 ip4:193.64.173.0/24 include:spf.lianamailer.com include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc@kanta.fi; fo=1; ruf=mailto:dmarc@kanta.fi;

policy: reject (enforced)

DKIM

default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn3xBPpCwuZNhGgwY9AHeo1u3PhZxkNt26iJ8Ejv7ssb9PyBrKT6/js0XXt4pyMJA72dujzDiojbbR…
selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tKBY0CUbDjsKY3ZiKMAHwNllPcUKofngPic+2/aAA4bHJ4DMqeygQmzkbg+Js3m5AyN5Iq+/xSnUn…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/AlSzKHNpbCiL+JcySxfGMIEMZJfbf56AmYXqXzlxEVSO+wyCY5usdgUu1B/P4h3vf3ojXaCLyA0u…

selectors probed

Certificate (current)

Entrust EV TLS Issuing RSA CA 1

from 2025-06-06 to 2026-07-05

Expires in 35 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.kanta.fi/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), autoplay=(self "https://video.kanta.fi"), payment=(), midi=(), microphone=(), gyroscope=(), fullscreen=(self "https://video.kanta.fi"), xr-spatial-tracking=(), usb=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' https://matomo.kela.fi https://chattirobottipalvelu.kela.fi 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://chattirobottipalvelu.kela.fi 'unsafe-inline'; object-src 'self'; base-uri 'self'; connect-src 'self' https://chattirobottipalvelu.kela.fi https://matomo.kela.fi; font-src 'self'; frame-src 'self' https://video.kanta.fi; img-src 'self' data: https://matomo.kela.fi https://static.kela.fi; manifest-src 'self'; media-src 'self'; worker-src 'none';
strict-transport-security: max-age=16070400; includeSubDomains