summaryrefslogtreecommitdiff
path: root/static/features.html
diff options
context:
space:
mode:
Diffstat (limited to 'static/features.html')
-rw-r--r--static/features.html7
1 files changed, 6 insertions, 1 deletions
diff --git a/static/features.html b/static/features.html
index 44633f19..f2a8adfc 100644
--- a/static/features.html
+++ b/static/features.html
@@ -210,7 +210,12 @@
<li>Authenticated encryption for all of our services</li>
<li>Strong cipher configurations for all of our services (SSH, TLS, etc.) with
only modern AEAD ciphers providing forward secrecy</li>
- <li>Our web services use OCSP stapling with Must-Staple</li>
+ <li>Our web services use robust OCSP stapling with Must-Staple</li>
+ <li>Our web sites do not include any third party content and entirely forbid
+ it via strict Content Security Policy rules</li>
+ <li>Our web sites disable referrer headers to maximize privacy</li>
+ <li>Our web sites fully enable cross origin isolation and disable embedding in
+ other content</li>
<li>DNSSEC implemented for all of our domains</li>
<li>DNS Certification Authority Authorization (CAA) records for all of our
domains permitting only Let's Encrypt to issue certificates with fully