HTTP Strict Transport Security (HSTS)

  1. Home
  2. Topics
  3. HTTP Strict Transport Security (HSTS)
Further information
All blog articles on the subject of HTTP Strict Transport Security (HSTS)
Andreas Sperber

Published on 09.07.2019 in the category Communication Security published.

HTTP Security Headers Protect Your Visitors

Security headers protect website users and expand the defense-in-depth strategy. We demonstrate how they are implemented and their specific impact. (read more)

Click-Jacking Cross Site Scripting (XSS) HTTP Strict Transport Security (HSTS) JavaScript Man-In-The-Middle (MIM) Secure Coding Social Engineering SSL-Stripping Encryption
Andreas Sperber

Published on 01.01.2018 in the category Web Application Security published.

Five good resolutions for secure IT systems in 2018

At the latest after a serious hacking incident, everyone becomes active. To prevent this from happening, aramido presents five security measures for web applications. (read more)

Apache Backup • Data Security Click-Jacking Cross Site Request Forgery (CSRF) Cross Site Scripting (XSS) Data Theft DDoS Defacement Hardening HTTP Strict Transport Security (HSTS) Incident Response Joomla Man-In-The-Middle (MIM) Secure Coding SQL Injections SSL-Stripping Web Application Zero-Day-Exploits
Andreas Sperber

Published on 21.07.2017 in the category Communication Security published.

Using HTTP Public Key Pinning Securely

Public Key Pinning restores trust in the PKI. However, this powerful method must be used correctly, otherwise serious dangers may arise. (read more)

Authentication HTTP Strict Transport Security (HSTS) Man-In-The-Middle (MIM) Public Key Infrastructure (PKI) Monitoring Encryption
Andreas Sperber

Published on 31.05.2017 in the category Communication Security published.

Trust is Good. Verification is Better.

Andreas Sperber spoke about trust problems in PKIs at the 17th GPN. With "Trust is Good. Verification is Better.", he calls on service providers to take action. (read more)

Certificate Transparency (CT) Chaos Computer Club (CCC) DANE DNS-based Authentication of Named Entities HTTP Strict Transport Security (HSTS) Public Key Infrastructure (PKI)
Andreas Sperber

Published on 21.03.2017 in the category Communication Security published.

Why Do We Trust Certificate Authorities?

Certificate authorities are an essential component of today's World Wide Web. We place great trust in them despite worrying incidents. (read more)

Authentication Blockchain Certificate Transparency (CT) DANE DNS-based Authentication of Named Entities HTTP Strict Transport Security (HSTS) Man-In-The-Middle (MIM) Public Key Infrastructure (PKI) Encryption X.509