Rabu, 09 Februari 2011
Enabling HTTP Strict Transport Security on debian servers
I just enabled HTTP Strict Transport Security (HSTS) markers on a bunch of web servers that offer HTTPS.It's an easy step to take, and it means that users of HSTS-compliant browsers (such as Chromium and the upcoming Firefox 4) or browsers with HSTS-compliant extensions (like Firefox's NoScript or HTTPS-Everywhere) will no longer be vulnerable to attacks like sslstrip once they have made one
Langganan:
Posting Komentar (Atom)
Tidak ada komentar:
Posting Komentar