Discover and read the best of Twitter Threads about #HSTS

Most recents (3)

Czego możemy dowiedzieć się o polskich domenach z listy HSTS Preload? Wątek 🧵👇
1/19
Co to jest HSTS? To mechanizm, za pomocą którego strona WWW może powiedzieć przeglądarce internetowej: "komunikuj się ze mną wyłącznie za pomocą szyfrowanego protokołu HTTPS". Podnosi to bezpieczeństwo korzystania z sieci. Więcej w Wikipedii: pl.wikipedia.org/wiki/HTTP_Stri…
2/19
Ryzyko jest istotnie zredukowane, ale nie znika. Przy pierwszym połączeniu ze stroną przeglądarka nie wie jeszcze, że HTTPS jest obowiązkowy. Pierwsze wejście na stronę z użyciem HTTP nadal naraża użytkownika na ryzyko podsłuchu i modyfikacji przesyłanych danych.
3/19
Read 19 tweets
I spoke with CBCs @elisevonscheel as part of our ongoing effort to improve web security of election and campaign websites in Canada and beyond. #TLS #HTTPS cbc.ca/news/politics/…
Things are moving in the right direction, but work with my graduate student Anthony Cardillo shows almost all election websites internationally still are vulnerable to TLS stripping attacks. There's more to be done! #HSTS essex.cc/papers/TLS-str…
In the US, @thejoshpit has been great work raising this issue and rooting out fake candidate websites with his #electiosnbusters project. Check out his research at pleasego.vote
Read 3 tweets
Now that we all have our .app TLD, we’ve got a little bit of work ahead of us. Your product site _must_ use HSTS (and, of course, HTTPS.)

security.googleblog.com/2017/09/broade…
For the HTTPS part, I highly recommend automating your SSL cert installation using Let’s Encrypt and acme.sh.

github.com/Neilpang/acme.…
HSTS is just header in the page you serve up over SSL. You can learn more about it and check your site here:

hstspreload.org
Read 11 tweets

Related hashtags

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3.00/month or $30.00/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!