Scott Helme (Page 24)

New grading on securityheaders.io

I recently wrote about how I'm giving up on HPKP and as part of that blog post I suggested I may change the grading criteria on securityheaders.io....

Free Post

Ghost

Moving to Ghost(Pro)

I recently changed my Ghost hosting setup just a little to harness a couple of benefits of Ghost(Pro) but still keep some of the levels of control that I...

Alexa Top 1 Million Analysis - August 2017

Free Post

securityheaders.io

Alexa Top 1 Million Analysis - August 2017

It's time for the 5th instalment of my Alexa Top 1 Million scan and this time around there's another new metric in the data. Previous Crawls...

Free Post

HPKP

I'm giving up on HPKP

HTTP Public Key Pinning is a very powerful standard that allows a host to instruct a browser to only accept certain public keys when communicating with it for a given...

Free Post

Las Vegas

My week in Vegas

After receiving an invitation I couldn't refuse I recently spent a week in Las Vegas with the BBC covering the most notorious week in the InfoSec calendar. 7 days packed with BlackHat, BSides Las Vegas and the notorious DEF CON....

Free Post

BBC Click

What happens in Vegas...

Following my trip to Las Vegas with the BBC, this is the second episode of BBC Click covering the BlackHat, BSides and DEF CON hacking conferences. Fear and Coding in...

Free Post

BBC Click

Fear and Coding in Las Vegas

I recently had the pleasure of acting as a Security Advisor for the BBC Click team whilst attending BlackHat, BSides LV and DEF CON in Las Vegas! The Conferences For...

Free Post

nginx

Customising Server header over HTTP/2 in NginX

I recently noticed that my website was returning the value 'nginx' in my Server header which was odd because I build NginX form source and specifically change the...

Free Post

Let's Encrypt

Let's Encrypt with DNS Round-Robin

I was having a period of really high load on securityheaders.io [https://securityheaders.io] earlier and whilst I looked into it and sorted out the root cause I wanted...

Free Post

steelcon

SteelCon 2017

After another superb SteelCon filled with awesome talks and awesome people, I thought I'd give a quick update on the event and on the Charity Sticker Stand I...

Scott Helme

Hi, I'm Scott Helme, a Security Researcher, Entrepreneur and International Speaker. I'm the creator of Report URI and Security Headers, and I deliver world renowned training on Hacking and Encryption.

New grading on securityheaders.io

Moving to Ghost(Pro)

Alexa Top 1 Million Analysis - August 2017

I'm giving up on HPKP

My week in Vegas

What happens in Vegas...

Fear and Coding in Las Vegas

Customising Server header over HTTP/2 in NginX

Let's Encrypt with DNS Round-Robin

SteelCon 2017

Upcoming Events

Cheat Sheets

Projects