Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: /security/fips redesign #14694

Open
wants to merge 4 commits into
base: feature-security-bubble
Choose a base branch
from

Conversation

mtruj013
Copy link
Contributor

@mtruj013 mtruj013 commented Jan 30, 2025

Done

QA

Issue / Card

Fixes https://warthogs.atlassian.net/browse/WD-12035, #14633

@webteam-app
Copy link

Copy link

codecov bot commented Jan 30, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Please upload report for BASE (feature-security-bubble@a906ef4). Learn more about missing BASE report.

Additional details and impacted files
@@                    Coverage Diff                     @@
##             feature-security-bubble   #14694   +/-   ##
==========================================================
  Coverage                           ?   72.32%           
==========================================================
  Files                              ?      120           
  Lines                              ?     3404           
  Branches                           ?     1177           
==========================================================
  Hits                               ?     2462           
  Misses                             ?      917           
  Partials                           ?       25           

@mtruj013 mtruj013 changed the title Apply page redesign feat: /security/fips redesign Jan 30, 2025
@mtruj013 mtruj013 changed the base branch from main to feature-security-bubble January 30, 2025 13:57
@eliman11
Copy link

eliman11 commented Jan 30, 2025

Thanks @mtruj013! Comments:

  • US spelling: optimised -> optimized in "...preconfigured with FIPS 140 certified packages optimised for the cloud."
  • Could we remove "140-3" from the button to keep it consistent with the previous section
Screenshot 2025-01-30 at 17 58 35
  • Under "Certified packages under FIPS 140-3" we're missing the "libgcrypt" row
Screenshot 2025-01-30 at 18 10 52
  • Henry's left a suggestion on the copydoc to remove that last "FIPS 140-3 and Ubuntu" section at the bottom

  • Sorry this wasn't on the design before but could we add the webinar link next to the contact us button

Screenshot 2025-01-30 at 18 04 14
  • Could we hide the hero image on smaller screens? Or maybe there's a workaround @mattea-turic can suggest on how it resizes
Screenshot 2025-01-30 at 18 14 03

@mattea-turic
Copy link
Collaborator

mattea-turic commented Jan 31, 2025

Thanks @mtruj013 !

Just one thing:

  • As @eliman11 mentioned, maybe we hide the nist logo on smaller screens? It doesn't really add much so I think it's fine to omit it there

All else is good, so I'll +1 :)

@eliman11
Copy link

Thanks for making those changes so quickly @mtruj013! Adding UX+1

<a class="p-button" href="/security/certifications/docs/fips">Read more about FIPS</a>
<a class="p-button--positive js-invoke-modal"
href="/security/contact-us">Contact us</a>
U.S Federal agencies and anyone deploying systems and cloud services for Federal government agency use, whether directly or through contractors, are required to run workloads with FIPS 140 validated cryptography. FIPS 140 has also been adopted outside of the public sector in industries where data security is heavily regulated, such as financial services (PCI-DSS), healthcare (HIPAA), and other sectors. <a href="/pro">Ubuntu Pro</a> provides FIPS 140 certified cryptographic packages.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
U.S Federal agencies and anyone deploying systems and cloud services for Federal government agency use, whether directly or through contractors, are required to run workloads with FIPS 140 validated cryptography. FIPS 140 has also been adopted outside of the public sector in industries where data security is heavily regulated, such as financial services (PCI-DSS), healthcare (HIPAA), and other sectors. <a href="/pro">Ubuntu Pro</a> provides FIPS 140 certified cryptographic packages.
US federal agencies and anyone deploying systems and cloud services for Federal government agency use, whether directly or through contractors, are required to run workloads with FIPS 140 validated cryptography. FIPS 140 has also been adopted outside of the public sector in industries where data security is heavily regulated, such as financial services (PCI-DSS), healthcare (HIPAA), and other sectors. <a href="/pro">Ubuntu Pro</a> provides FIPS 140 certified cryptographic packages.

<section class="p-section">
<div class="row--50-50">
<hr class="p-rule" />
<div class="col">
<h2>How Ubuntu enables your compliance with FedRAMP, FISMA, FIPS and DISA-STIG</h2>
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
<h2>How Ubuntu enables your compliance with FedRAMP, FISMA, FIPS and DISA-STIG</h2>
<h2>How Ubuntu enables your compliance with FedRAMP, FISMA, FIPS, and DISA-STIG</h2>

<a href="https://azuremarketplace.microsoft.com/en-us/marketplace/apps/canonical.0001-com-ubuntu-pro-xenial-fips?tab=Overview"
aria-label="Ubuntu Pro FIPS 16.04 on Microsoft Azure">
<div class="p-image-container--16-9 is-highlighted">
{{ image (
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please remove the space between "image" and "(" and reformat the document with djlint.

<a href="https://aws.amazon.com/marketplace/pp/prodview-wzhyxs72ie52u"
aria-label="Ubuntu Pro FIPS 16.04 on Amazon Web Services">
<div class="p-image-container--16-9 is-highlighted">
{{ image (
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please remove the space between "image" and "(" and reformat the document with djlint.

<a href="https://azuremarketplace.microsoft.com/en-us/marketplace/apps/canonical.0001-com-ubuntu-pro-bionic-fips?tab=Overview"
aria-label="Ubuntu Pro FIPS 18.04 on Microsoft Azure">
<div class="p-image-container--16-9 is-highlighted">
{{ image (
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please remove the space between "image" and "(" and reformat the document with djlint.

<a href="https://aws.amazon.com/marketplace/pp/prodview-pfsgbblavhjc4"
aria-label="Ubuntu Pro FIPS 18.04 on Amazon Web Services">
<div class="p-image-container--16-9 is-highlighted">
{{ image (
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please remove the space between "image" and "(" and reformat the document with djlint.

<a href="https://azuremarketplace.microsoft.com/en-us/marketplace/apps/canonical.0001-com-ubuntu-pro-focal-fips?tab=Overview"
aria-label="Ubuntu Pro FIPS 20.04 on Microsoft Azure">
<div class="p-image-container--16-9 is-highlighted">
{{ image (
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please remove the space between "image" and "(" and reformat the document with djlint.

<a href="https://aws.amazon.com/marketplace/pp/prodview-l2hkkatnodedk?sr=0-1&ref_=beagle&applicationId=AWSMPContessa"
aria-label="Ubuntu Pro FIPS 20.04 on Amazon Web Services">
<div class="p-image-container--16-9 is-highlighted">
{{ image (
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please remove the space between "image" and "(" and reformat the document with djlint.

</div>
<div class="col">
<p>
The following list contains the FIPS 140 validated components that are available with <a href="/pro">Ubuntu Pro</a>. The validated modules are API and ABI compatible with the default Ubuntu packages. The validation testing for Ubuntu was performed by atsec Information Security, a NIST accredited laboratory. Certifications under FIPS 140-2 will be moved to the historical list after September 2026 (although these products can still be purchased and used), and new products are expected to be certified <a href="https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-standards">under FIPS 140-3</a>.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
The following list contains the FIPS 140 validated components that are available with <a href="/pro">Ubuntu Pro</a>. The validated modules are API and ABI compatible with the default Ubuntu packages. The validation testing for Ubuntu was performed by atsec Information Security, a NIST accredited laboratory. Certifications under FIPS 140-2 will be moved to the historical list after September 2026 (although these products can still be purchased and used), and new products are expected to be certified <a href="https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-standards">under FIPS 140-3</a>.
The following list contains the FIPS 140-2 validated components that are available with <a href="/pro">Ubuntu Pro</a>. The validated modules are API and ABI compatible with the default Ubuntu packages. The validation testing for Ubuntu was performed by atsec Information Security, a NIST accredited laboratory. Certifications under FIPS 140-2 will be moved to the historical list after September 2026 (although these products can still be purchased and used), and new products are expected to be certified <a href="https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-standards">under FIPS 140-3</a>.

{% with first_item="_security_discussion", second_item="_security_esm", third_item="_security_further_reading" %}
{% include "shared/contextual_footers/_contextual_footer.html" %}
{% endwith %}

<!-- Set default Marketo information for contact form below-->
<div class="u-hide"
id="contact-form-container"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Would it be too much effort if we convert this form to use form generator? We are trying to have form generator on all the new bubbles we rebrand.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants