Tag: HTTP Security Headers

Applications / Linux / Servers & Services / Software / Web

NGINX - Access-Control-Allow-Origin - CORS policy settings How to properly set the Access-Control-Allow-Origin header to NGINX to allow Cross Request Resource Sharing for all (or specific) sites

- by Ryan - 1 Comment

Those who often read this blog already know that we're deeply in love with NGINX, a lightweight, high-performance and open-source web server and reverse proxy used by more than 358 …

NGINX - Access-Control-Allow-Origin - CORS policy settings How to properly set the Access-Control-Allow-Origin header to NGINX to allow Cross Request Resource Sharing for all (or specific) sites Read More
Cyber Security / Servers & Services / Web

Expect-CT - A new HTTP Security Header to be aware of A new HTTP header that allows web host operators to instruct user agents to expect valid Signed Certificate Timestamps (SCTs) to be served on connections to these hosts.

- by Ryan - 10 Comments.

I'm writing this post as a follow-up of this article about HTTP Security Headers that I wrote a year ago to introduce a new kid on the block: its name …

Expect-CT - A new HTTP Security Header to be aware of A new HTTP header that allows web host operators to instruct user agents to expect valid Signed Certificate Timestamps (SCTs) to be served on connections to these hosts. Read More
Cyber Security / Servers & Services / Web

NGINX - How to setup the nginx.conf file to send HTTP Security Headers with your web site (and score an A on securityheaders.io) How to setup the nginx.conf to secure all your Nginx-hosted websites with the required HTTP Security Headers and get A rate from securityheaders.io scan.

- by Ryan - 2 Comments.

We already explained the basics about HTTP Security Headers in this previous post: it's now time to put all these words into action and learn how we can implement them …

NGINX - How to setup the nginx.conf file to send HTTP Security Headers with your web site (and score an A on securityheaders.io) How to setup the nginx.conf to secure all your Nginx-hosted websites with the required HTTP Security Headers and get A rate from securityheaders.io scan. Read More
Cyber Security / Servers & Services / Web

Apache - How to setup the httpd.conf file to send HTTP Security Headers with your web site (and score an A on securityheaders.io) How to setup the httpd.conf to secure all your Apache-hosted websites with the required HTTP Security Headers and get A rate from securityheaders.io scan.

- by Ryan - 8 Comments.

We already explained the basics about HTTP Security Headers in this previous post: it's now time to put these concepts into action and implement them within our Apache-based web site …

Apache - How to setup the httpd.conf file to send HTTP Security Headers with your web site (and score an A on securityheaders.io) How to setup the httpd.conf to secure all your Apache-hosted websites with the required HTTP Security Headers and get A rate from securityheaders.io scan. Read More
Cyber Security / Servers & Services / Web

IIS - How to setup the web.config file to send HTTP Security Headers with your web site (and score an A on securityheaders.io) How to tweak your web application's web.config file to secure your Windows + IIS hosted website with the required HTTP Security Headers and get A rate from securityheaders.io scan.

- by Ryan - 7 Comments.

We already explained the basics about HTTP Security Headers in this previous post: it's now time to put all these words into action and learn how we can implement them …

IIS - How to setup the web.config file to send HTTP Security Headers with your web site (and score an A on securityheaders.io) How to tweak your web application's web.config file to secure your Windows + IIS hosted website with the required HTTP Security Headers and get A rate from securityheaders.io scan. Read More