diff options
| author | Daniel Micay <danielmicay@gmail.com> | 2021-03-23 10:11:24 -0400 |
|---|---|---|
| committer | Daniel Micay <danielmicay@gmail.com> | 2021-03-23 10:11:24 -0400 |
| commit | 35f926e00e8d6466803e6c869e7a555bec7a9e4c (patch) | |
| tree | 873cb1dae3af5c5d4b910403d3088ec4041f9323 | |
| parent | 7a3a5b3f571d85906b7f4c7d1c64ae411b01c687 (diff) | |
list more web service / site security features
| -rw-r--r-- | static/features.html | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/static/features.html b/static/features.html index 44633f19..f2a8adfc 100644 --- a/static/features.html +++ b/static/features.html @@ -210,7 +210,12 @@ <li>Authenticated encryption for all of our services</li> <li>Strong cipher configurations for all of our services (SSH, TLS, etc.) with only modern AEAD ciphers providing forward secrecy</li> - <li>Our web services use OCSP stapling with Must-Staple</li> + <li>Our web services use robust OCSP stapling with Must-Staple</li> + <li>Our web sites do not include any third party content and entirely forbid + it via strict Content Security Policy rules</li> + <li>Our web sites disable referrer headers to maximize privacy</li> + <li>Our web sites fully enable cross origin isolation and disable embedding in + other content</li> <li>DNSSEC implemented for all of our domains</li> <li>DNS Certification Authority Authorization (CAA) records for all of our domains permitting only Let's Encrypt to issue certificates with fully |