Austria's Secure IT Center — 20 requests, 1 domain. Absolutely everything from [www.a-sit.at](https://www.a-sit.at). Zero external dependencies, zero cookies, zero trackers. Apache on Debian.
Timeline of the leak
Context
A-SIT (Zentrum für sichere Informationstechnologie Austria) is Austria’s competence center for cryptography and secure information technology. Founded in 1999, jointly funded by the Austrian federal government, the Austrian National Bank, and the Graz University of Technology. Participates in the development of electronic signature and eIDAS standards. HAR: 20 requests, 1 domain.
One domain — the maximum minimum
20 requests, all to [www.a-sit.at](https://www.a-sit.at). Not a single external request — no CDN, no analytics, no fonts, no chatbots. Server: Apache 2.4.67 on Debian — proprietary infrastructure with no cloud provider. HSTS with max-age=31536000.
Policy — correct and clear
The policy is in English. It explicitly states the GDPR legal bases: cookies only upon consent (Art. 6(1)(a)), log files also upon consent. Applies to both domains of the organization: a-sit.at and egiz.gv.at (E-Government Innovationszentrum). No DPO explicitly named, but the policy describes data subject rights.
Profile matches the mission
An organization specializing in secure information technology and cryptography — a public website with no external dependencies whatsoever. The same result as the ECB (1 domain) and the Council of the EU (1 domain) — architectural deliberateness.
Conclusion
20 requests, 1 domain, zero external services. A-SIT is the second site in the Austrian series after ages.at, and it’s already green. The Secure IT Center complies with the very standard it develops.
f8a5059bf051f14d69e15059703fc59f5bca56c7c2a25f65c3b32b7bb6f1716b