Browser security: Difference between revisions
Jump to navigation
Jump to search
Created page with "=Resources= * https://caniuse.com/ great for seeing usage across browsers =HSTS HTTP Strict Transport Security= ==Set up Apache HSTS== In Apache 2 000-default.conf <syntaxhigh..." |
|||
| Line 15: | Line 15: | ||
</syntaxhighlight> | </syntaxhighlight> | ||
=HPKP HTTP Public Key Pinning = | =HPKP HTTP Public Key Pinning = | ||
= | =Content Security Policy (CSP)= | ||
=Tools= | =Tools= | ||
Revision as of 06:01, 4 September 2020
Resources
- https://caniuse.com/ great for seeing usage across browsers
HSTS HTTP Strict Transport Security
Set up Apache HSTS
In Apache 2 000-default.conf
<VirtualHost *:80>
ServerName example.com
Redirect permanent / https://example.com/
</VirtualHost>
In Apache 2 default-ssl.conf
Header always set Strict-Transport-Security "max-age=63072000; includeSubdomains;"