<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="//scotthelme.co.uk/sitemap.xsl"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1"><url><loc>https://scotthelme.co.uk/connection-allowlist-a-network-firewall-built-into-the-browser/</loc><lastmod>2026-07-08T16:11:31.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2026/07/connection-allowlist-hero.png</image:loc><image:caption>connection-allowlist-hero.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/top-1-million-analysis-june-2026-ten-years-of-web-security/</loc><lastmod>2026-07-01T11:58:27.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2026/06/10-year-part-1.png</image:loc><image:caption>10-year-part-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/top-1-million-analysis-june-2026-the-state-of-crypto/</loc><lastmod>2026-07-01T11:57:14.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2026/06/10-year-part-2.png</image:loc><image:caption>10-year-part-2.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/why-no-passkeys-naming-the-top-sites-that-still-dont-support-them/</loc><lastmod>2026-06-25T09:14:15.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2026/06/why-no-passkeys-hero.png</image:loc><image:caption>why-no-passkeys-hero.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/a-dead-cdn-a-wildcard-and-an-attack-waiting-to-happen-the-netdna-ssl-com-takeover/</loc><lastmod>2026-06-24T13:11:54.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2026/06/netdna-ssl.png</image:loc><image:caption>netdna-ssl.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/the-instructure-canvas-breach-2026-how-xss-in-a-support-ticket-compromised-275-million-students/</loc><lastmod>2026-06-15T12:21:15.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2026/06/instructure-canvas.png</image:loc><image:caption>instructure-canvas.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/open-sourcing-dbsc-php-a-server-library-for-device-bound-session-credentials-in-php/</loc><lastmod>2026-06-08T14:00:56.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2026/06/dbsc-php.png</image:loc><image:caption>dbsc-php.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/dbsc-beta-at-report-uri/</loc><lastmod>2026-06-05T14:22:22.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2026/06/dbsc-beta.png</image:loc><image:caption>dbsc-beta.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/device-bound-session-credentials-making-stolen-cookies-useless/</loc><lastmod>2026-06-02T10:59:38.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2026/05/dbsc.png</image:loc><image:caption>dbsc.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/passkeys-permissions-policy-and-bug-hunting-in-1passwords-webauthn-wrapper/</loc><lastmod>2026-05-21T14:40:02.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2026/05/passkeys-pp-1pass.png</image:loc><image:caption>passkeys-pp-1pass.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/open-sourcing-passkeys-php-a-security-focused-webauthn-library-for-php/</loc><lastmod>2026-05-20T12:16:58.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2026/05/passkeys-php.png</image:loc><image:caption>passkeys-php.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/xss-is-deadly-for-passkeys-the-hidden-risk-of-attestation-none/</loc><lastmod>2026-05-19T12:24:43.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2026/05/passkeys-xss.png</image:loc><image:caption>passkeys-xss.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/passkeys-101-an-introduction-to-passkeys-and-how-they-work/</loc><lastmod>2026-05-18T09:16:29.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2026/05/introduction-to-passkeys.png</image:loc><image:caption>introduction-to-passkeys.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/anatomy-of-a-woocommerce-skimmer-a-technical-deep-dive/</loc><lastmod>2026-05-15T14:22:57.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2026/05/woocomerce-skimmer.png</image:loc><image:caption>woocomerce-skimmer.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/under-attack-responding-to-the-rise-of-info-stealer-threats/</loc><lastmod>2026-05-11T13:10:11.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2026/03/info-stealer-header.webp</image:loc><image:caption>info-stealer-header.webp</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/security-considerations-when-using-passkeys-on-your-website/</loc><lastmod>2026-04-22T13:37:22.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2026/03/scott-blog-passkey-header.jpg</image:loc><image:caption>scott-blog-passkey-header.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/fighting-an-active-magecart-campaign/</loc><lastmod>2026-04-13T10:48:19.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2026/04/magecart-malware-investigation.png</image:loc><image:caption>magecart-malware-investigation.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/amazing-refresh-a-malicious-chrome-extension-running-malware-in-the-browser/</loc><lastmod>2026-04-07T15:05:57.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2026/04/amazing-refresh-extension-analysis.png</image:loc><image:caption>amazing-refresh-extension-analysis.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/bringing-in-the-experts-having-our-passkeys-implementation-security-tested/</loc><lastmod>2026-04-02T13:06:02.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2026/03/passkeys-test-header.png</image:loc><image:caption>passkeys-test-header.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/launching-passkeys-support-on-report-uri/</loc><lastmod>2026-03-30T10:10:05.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2026/03/passkeys-header.jpg</image:loc><image:caption>passkeys-header.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/when-one-in-a-billion-happens-every-day-scaling-redis-at-report-uri/</loc><lastmod>2026-03-24T14:36:17.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2026/03/redis-billions.webp</image:loc><image:caption>redis-billions.webp</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/leverage-our-treasure-trove-of-threat-intelligence-data/</loc><lastmod>2026-03-18T16:15:32.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2025/12/threat-intel-treasure-trove.webp</image:loc><image:caption>threat-intel-treasure-trove.webp</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/xss-ranked-1-top-threat-of-2025-by-mitre-and-cisa/</loc><lastmod>2026-03-10T14:21:27.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2026/03/mitre-cisa.png</image:loc><image:caption>mitre-cisa.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/dns-persist-01-handling-domain-control-validation-in-a-short-lived-certificate-world/</loc><lastmod>2026-02-09T17:58:33.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2026/01/dns-persist-01.webp</image:loc><image:caption>dns-persist-01.webp</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/certificate-transparency-an-introduction/</loc><lastmod>2026-02-02T21:49:51.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/02/ct_home_security.png</image:loc><image:caption>ct_home_security.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/the-european-space-agency-got-hacked-and-now-we-own-the-domain-used/</loc><lastmod>2026-02-02T13:01:53.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2026/01/esa-blog.webp</image:loc><image:caption>esa-blog.webp</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/eating-our-own-dogfood-what-running-report-uri-on-report-uri-taught-us/</loc><lastmod>2026-01-29T16:31:46.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2026/01/dogfooding.webp</image:loc><image:caption>dogfooding.webp</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/blink-and-youll-miss-them-6-day-certificates-are-here/</loc><lastmod>2026-01-19T10:48:24.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2026/01/6-day-certs.webp</image:loc><image:caption>6-day-certs.webp</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/what-a-year-of-solar-and-batteries-really-saved-us-in-2025/</loc><lastmod>2026-01-13T21:36:16.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2026/01/2025-energy.webp</image:loc><image:caption>2025-energy.webp</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/report-uri-penetration-test-2025/</loc><lastmod>2025-12-15T15:36:37.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2025/12/report-uri-penetration-test.webp</image:loc><image:caption>report-uri-penetration-test.webp</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/report-uri-outage-update/</loc><lastmod>2025-11-19T21:24:19.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2025/11/report-uri-down.webp</image:loc><image:caption>report-uri-down.webp</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/integrity-policy-monitoring-and-enforcing-the-use-of-sri/</loc><lastmod>2025-11-19T15:01:02.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2025/11/integrity-policy.webp</image:loc><image:caption>integrity-policy.webp</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/cve-2025-49844-the-redis-cvss-10-0-vulnerability-and-how-we-responded/</loc><lastmod>2025-10-14T08:11:46.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2025/10/9b5f57d6-6615-4e2a-b94c-4ee23a4cf06e.webp</image:loc><image:caption>9b5f57d6-6615-4e2a-b94c-4ee23a4cf06e.webp</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/capture-javascript-integrity-metadata-using-csp/</loc><lastmod>2025-09-29T10:51:08.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2025/09/csp-integrity-1.webp</image:loc><image:caption>csp-integrity-1.webp</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/were-going-high-availability-with-redis-sentinel/</loc><lastmod>2025-08-18T12:46:41.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2025/08/redis-sentinel-upgrade.webp</image:loc><image:caption>redis-sentinel-upgrade.webp</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/content-security-policy-an-introduction/</loc><lastmod>2025-08-16T09:36:01.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2025/08/csp.webp</image:loc><image:caption>csp.webp</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/automation-improvements-after-a-tesla-powerwall-outage/</loc><lastmod>2025-08-11T14:18:44.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2025/08/header-tesla-powerwall-debugging.webp</image:loc><image:caption>header-tesla-powerwall-debugging.webp</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/owasp-asvs-5-0-0-is-here/</loc><lastmod>2025-08-04T11:16:09.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2025/07/OWASP_ASVS_Linkedin_Banner-01.jpg</image:loc><image:caption>OWASP_ASVS_Linkedin_Banner-01.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/trillion-with-a-t-surpassing-2-trillion-events-processed/</loc><lastmod>2025-07-02T18:12:32.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2025/07/Screenshot-2025-07-01-113513.png</image:loc><image:caption>Screenshot-2025-07-01-113513.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/v2-hacking-my-tesla-powerwalls-to-be-the-ultimate-home-energy-solution/</loc><lastmod>2025-06-13T11:58:07.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2025/06/tesla-powerwalls-export.webp</image:loc><image:caption>tesla-powerwalls-export.webp</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/hacking-my-tesla-powerwalls-to-be-the-ultimate-home-energy-solution/</loc><lastmod>2025-06-13T10:53:33.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2025/04/b7f4b5a1-2638-4584-9f09-4014d7b50ab1.webp</image:loc><image:caption>b7f4b5a1-2638-4584-9f09-4014d7b50ab1.webp</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/shorter-certificates-are-coming/</loc><lastmod>2025-04-22T14:18:30.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2025/04/eba75517-388d-4955-8e5f-cb785d86c547.webp</image:loc><image:caption>eba75517-388d-4955-8e5f-cb785d86c547.webp</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/pci-dss-faq-saq-wtf-bbq/</loc><lastmod>2025-03-13T13:16:42.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2025/03/Screenshot-2025-03-12-180351.png</image:loc><image:caption>Screenshot-2025-03-12-180351.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/report-uri-launching-policy-watch-and-other-improvements/</loc><lastmod>2025-03-11T08:44:48.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2025/03/Screenshot-2025-03-04-124856.png</image:loc><image:caption>Screenshot-2025-03-04-124856.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/lets-encrypt-to-offer-6-day-certificates/</loc><lastmod>2025-03-04T10:54:02.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2025/03/6-day-certificate.webp</image:loc><image:caption>6-day-certificate.webp</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/updating-to-pi-hole-v6-and-enabling-https/</loc><lastmod>2025-02-26T13:17:01.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2025/02/Screenshot-2025-02-22-142234.png</image:loc><image:caption>Screenshot-2025-02-22-142234.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/stronger-than-ever-how-we-turned-a-ddos-attack-into-a-lesson-in-resilience/</loc><lastmod>2025-02-03T14:06:34.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2025/01/copy-on-write.webp</image:loc><image:caption>copy-on-write.webp</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/the-vulnerable-web-api-for-my-nissan-leaf/</loc><lastmod>2025-01-23T16:21:51.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2025/01/IMG_5352.png</image:loc><image:caption>IMG_5352.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/lets-encrypt-to-end-ocsp-support-in-2025/</loc><lastmod>2024-12-30T11:01:42.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2024/12/ocsp-header-image.webp</image:loc><image:caption>ocsp-header-image.webp</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/xss-ranked-1-top-threat-of-2024-by-mitre-and-cisa/</loc><lastmod>2024-12-10T14:35:53.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2024/12/Screenshot-2024-12-05-165944.png</image:loc><image:caption>Screenshot-2024-12-05-165944.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/report-uri-penetration-test-2024/</loc><lastmod>2024-12-04T12:04:36.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2024/12/Screenshot-2024-12-04-112400.png</image:loc><image:caption>Screenshot-2024-12-04-112400.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/are-shorter-certificates-finally-coming/</loc><lastmod>2024-11-14T21:22:34.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2024/10/8bef2070-4515-490c-ae08-ee1d00916b24.webp</image:loc><image:caption>8bef2070-4515-490c-ae08-ee1d00916b24.webp</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/report-uri-simplifying-pricing-and-changes-to-free-accounts/</loc><lastmod>2024-10-28T17:58:32.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2024/10/Screenshot-2024-10-24-102901.png</image:loc><image:caption>Screenshot-2024-10-24-102901.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/ios-18-quick-tips-security-edition/</loc><lastmod>2024-10-02T11:17:37.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2024/10/ios-18-icon.png</image:loc><image:caption>ios-18-icon.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/introducing-frame-watch-monitor-payment-page-activity-with-ease/</loc><lastmod>2024-07-29T16:18:10.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2024/07/Screenshot-2024-07-29-171755.png</image:loc><image:caption>Screenshot-2024-07-29-171755.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/im-a-microsoft-mvp-again/</loc><lastmod>2024-07-15T12:45:10.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2024/07/MVP_Badge_Horizontal_Preferred_Blue3005_RGB.png</image:loc><image:caption>MVP_Badge_Horizontal_Preferred_Blue3005_RGB.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/pci-dss-4-0-1-whats-changed/</loc><lastmod>2024-07-09T12:50:40.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2024/07/pcissc.png</image:loc><image:caption>pcissc.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/warning-users-of-the-polyfill-io-supply-chain-attack/</loc><lastmod>2024-07-01T14:55:42.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2024/07/Screenshot-2024-07-01-123514.png</image:loc><image:caption>Screenshot-2024-07-01-123514.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/pci-dss-4-0-certificate-transparency-monitoring-is-mandatory/</loc><lastmod>2024-04-22T09:59:54.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2024/04/pcissc-1.png</image:loc><image:caption>pcissc-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/pci-dss-4-0-its-time-to-get-serious-on-magecart/</loc><lastmod>2024-04-17T11:44:47.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2022/04/pcissc-1.png</image:loc><image:caption>pcissc-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/a-balanced-approach-new-security-headers-grading-criteria/</loc><lastmod>2024-04-10T16:21:21.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2023/11/banner-1.png</image:loc><image:caption>banner-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/google-announce-new-minimum-viable-secure-product/</loc><lastmod>2023-11-28T15:01:03.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2023/11/mvsp.png</image:loc><image:caption>mvsp.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/holiday-fun-with-my-unifi-g4-doorbell-pro/</loc><lastmod>2023-11-22T14:53:40.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2023/10/IMG_6162.jpeg</image:loc><image:caption>IMG_6162.jpeg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/report-uri-penetration-test-2023/</loc><lastmod>2023-11-20T11:19:44.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2023/11/pen-test-report-banner.png</image:loc><image:caption>pen-test-report-banner.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/report-uri-a-week-in-numbers-2023-edition/</loc><lastmod>2023-11-10T15:12:49.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2023/11/cpu.png</image:loc><image:caption>cpu.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/what-the-qwac/</loc><lastmod>2023-11-07T19:11:21.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2023/11/ec.png</image:loc><image:caption>ec.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/hardening-the-csp-on-report-uri-io/</loc><lastmod>2023-11-01T14:53:40.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2023/11/hardening.png</image:loc><image:caption>hardening.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/fixing-mixed-content-with-csp/</loc><lastmod>2023-11-01T14:52:19.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2023/11/mixed.png</image:loc><image:caption>mixed.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/processing-truncated-requests-php-debugging-deep-dive/</loc><lastmod>2023-10-30T19:38:23.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2023/09/background.png</image:loc><image:caption>background.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/sockets-under-the-hood/</loc><lastmod>2023-10-16T14:09:22.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2023/10/background-backlog.png</image:loc><image:caption>background-backlog.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/unravelling-mystery-of-truncated-post-requests-report-uri/</loc><lastmod>2023-10-02T10:31:17.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2023/09/image-3-1.png</image:loc><image:caption>image-3-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/do-breached-sites-take-security-seriously/</loc><lastmod>2023-07-26T14:24:43.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2023/07/hibp.png</image:loc><image:caption>hibp.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/celebrating-250-000-000-scans-on-security-headers/</loc><lastmod>2023-07-19T08:53:16.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2023/07/scans.png</image:loc><image:caption>scans.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/cryptographic-agility-part-1-server-certificates/</loc><lastmod>2023-07-14T09:57:35.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2023/07/validity-period.png</image:loc><image:caption>validity-period.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/security-headers-is-joining-probely/</loc><lastmod>2023-06-07T14:11:38.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2023/06/IMG_9452.png</image:loc><image:caption>IMG_9452.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/tough-cookies/</loc><lastmod>2023-05-15T12:22:26.000Z</lastmod><image:image><image:loc>https://scotthelme.co.uk/content/images/2016/08/cookie-monster-2.jpg</image:loc><image:caption>cookie-monster-2.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/overriding-http-response-headers-in-chrome-dev-tools/</loc><lastmod>2023-05-04T13:37:01.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2023/04/header-overrides.png</image:loc><image:caption>header-overrides.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/goodbye-old-friend/</loc><lastmod>2023-05-03T09:37:39.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2023/05/background-new-https-icon.png</image:loc><image:caption>background-new-https-icon.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/report-uri-to-partner-with/</loc><lastmod>2023-05-02T14:52:00.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2023/04/APO_Logo_Wide.png</image:loc><image:caption>APO_Logo_Wide.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/setting-up-https-on-the-udm-pro/</loc><lastmod>2023-04-29T15:53:53.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/04/udm-pro-https.png</image:loc><image:caption>udm-pro-https.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/5-years-on/</loc><lastmod>2023-04-24T12:26:06.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2023/04/antivirus-warning.png</image:loc><image:caption>antivirus-warning.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/implementing-all-the-stripe-things-for-report-uri/</loc><lastmod>2023-04-17T16:22:57.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2022/11/portal.png</image:loc><image:caption>portal.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/boosting-account-security-pwned-passwords-and-zxcvbn/</loc><lastmod>2023-03-13T20:13:27.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2023/03/too-weak.png</image:loc><image:caption>too-weak.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/still-think-you-dont-need-https/</loc><lastmod>2023-03-07T16:25:47.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/02/HTTPS_icon.png</image:loc><image:caption>HTTPS_icon.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/coop-and-coep/</loc><lastmod>2023-02-10T18:08:56.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/11/hero.jpg</image:loc><image:caption>hero.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/announcing-the-new-security-headers-api-new-features-and-upgrades/</loc><lastmod>2023-02-02T16:54:03.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2023/01/sec-hrs-api-keys.png</image:loc><image:caption>sec-hrs-api-keys.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/strengthening-security-on-my-apple-account/</loc><lastmod>2023-02-01T12:51:35.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2023/01/apple-security.png</image:loc><image:caption>apple-security.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/report-uri-penetration-test-2022/</loc><lastmod>2022-12-12T15:04:45.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2022/12/pen-test-header.png</image:loc><image:caption>pen-test-header.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/the-m140i-project-post-part-17/</loc><lastmod>2022-12-09T13:53:42.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2022/11/IMG_0825-1.JPEG</image:loc><image:caption>IMG_0825-1.JPEG</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/new-pricing-for-report-uri/</loc><lastmod>2022-11-28T17:12:40.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2022/11/pricing-header.png</image:loc><image:caption>pricing-header.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/expanding-the-threat-intelligence-capabilities-on-report-uri/</loc><lastmod>2022-11-25T15:58:33.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2022/11/threat-intel-header.png</image:loc><image:caption>threat-intel-header.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/report-uri-has-a-new-look/</loc><lastmod>2022-11-21T11:52:02.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2022/11/header-new.png</image:loc><image:caption>header-new.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/im-now-a-microsoft-most-valuable-professional/</loc><lastmod>2022-10-10T15:01:58.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2022/10/mvp.png</image:loc><image:caption>mvp.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/the-m140i-project-post-part-16/</loc><lastmod>2022-09-26T12:54:13.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2022/07/IMG_2917-2.JPEG</image:loc><image:caption>IMG_2917-2.JPEG</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/another-free-ca-to-use-via-acme/</loc><lastmod>2022-08-25T13:22:17.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2022/08/gts.png</image:loc><image:caption>gts.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/introducing-another-free-ca-as-an-alternative-to-lets-encrypt/</loc><lastmod>2022-08-25T13:22:08.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/11/zerossl-1.png</image:loc><image:caption>zerossl-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/heres-another-free-ca-as-an-alternative-to-lets-encrypt/</loc><lastmod>2022-08-25T13:21:58.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/08/sslcom.png</image:loc><image:caption>sslcom.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/having-a-backup-ca-for-lets-encrypt/</loc><lastmod>2022-08-25T13:21:47.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2019/01/le-logo-wide-1.svg</image:loc><image:caption>le-logo-wide-1.svg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/the-first-ever-issue-with-my-pi-hole/</loc><lastmod>2022-08-18T13:48:05.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2022/08/1.png</image:loc><image:caption>1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/report-uri-major-new-features-threat-intelligence-and-more/</loc><lastmod>2022-08-08T10:34:07.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2022/07/csp-wizard.png</image:loc><image:caption>csp-wizard.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/top-1-million-analysis-june-2022/</loc><lastmod>2022-06-30T16:10:25.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2022/06/title-graph.png</image:loc><image:caption>title-graph.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/increasing-entropy-in-our-csp-nonces/</loc><lastmod>2022-05-06T11:26:06.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2022/05/entropy.png</image:loc><image:caption>entropy.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/re-bloom-pwned-passwords-v8/</loc><lastmod>2022-03-21T10:55:26.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2022/02/pwned.png</image:loc><image:caption>pwned.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/can-you-get-pwned-with-css/</loc><lastmod>2022-02-23T18:50:42.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2022/02/scott-a.png</image:loc><image:caption>scott-a.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/projects-i-support/</loc><lastmod>2022-01-31T12:52:30.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2022/01/le.png</image:loc><image:caption>le.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/looks-like-a-duck-swims-like-a-duck-qwacs-like-a-duck-probably-an-ev-certifiacate/</loc><lastmod>2022-01-04T11:15:12.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/12/qwac.png</image:loc><image:caption>qwac.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/supercharging-your-dns-with-cloudflare/</loc><lastmod>2021-12-13T22:27:38.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/01/gateway.png</image:loc><image:caption>gateway.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/responding-to-the-log4j-2-vulnerability/</loc><lastmod>2021-12-13T18:23:12.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/12/analytics.png</image:loc><image:caption>analytics.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/hsts-the-missing-link-in-tls/</loc><lastmod>2021-12-09T11:55:19.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/top-1-million-analysis-november-2021/</loc><lastmod>2021-12-09T11:42:27.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/11/graph.png</image:loc><image:caption>graph.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/frequency-analysis-on-hundreds-of-billions-of-reports-at-report-uri-top-k/</loc><lastmod>2021-11-29T16:32:26.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/11/vol.png</image:loc><image:caption>vol.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/report-uri-is-now-using-csp-nonces-in-an-enforced-policy/</loc><lastmod>2021-11-23T17:16:48.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/11/nonces.png</image:loc><image:caption>nonces.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/report-uri-penetration-test-2021/</loc><lastmod>2021-11-22T13:31:17.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/11/pentest.png</image:loc><image:caption>pentest.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/ee-brightbox-router-patched-still-vulnerable/</loc><lastmod>2021-11-19T10:23:43.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/11/wires.png</image:loc><image:caption>wires.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/sketchy-pwned-passwords/</loc><lastmod>2021-11-15T12:59:40.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/10/pwned-1-1.png</image:loc><image:caption>pwned-1-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/frequency-analysis-hundreds-billions-reports-report-uri-count-min-sketch/</loc><lastmod>2021-11-10T13:54:09.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/09/vol.png</image:loc><image:caption>vol.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/when-pwned-passwords-bloom/</loc><lastmod>2021-11-01T12:12:11.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/10/pwned-1.png</image:loc><image:caption>pwned-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/frequency-analysis-on-hundreds-of-billions-of-reports-at-report-uri-bloom-filters/</loc><lastmod>2021-10-26T11:09:33.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/10/graph.png</image:loc><image:caption>graph.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/should-clients-care-about-the-expiration-of-a-root-certificate/</loc><lastmod>2021-10-13T20:19:28.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/10/expired.png</image:loc><image:caption>expired.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/lets-encrypt-root-expiration-post-mortem/</loc><lastmod>2021-10-08T12:02:00.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/10/le.png</image:loc><image:caption>le.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/crlite-finally-a-fix-for-broken-revocation/</loc><lastmod>2021-09-22T14:34:34.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/02/paper.png</image:loc><image:caption>paper.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/lets-encrypt-old-root-expiration/</loc><lastmod>2021-09-21T07:08:30.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/09/le.png</image:loc><image:caption>le.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/the-m140i-project-post-part-15/</loc><lastmod>2021-09-17T12:07:23.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/08/IMG_6293.jpeg</image:loc><image:caption>IMG_6293.jpeg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/say-hello-to-security-txt/</loc><lastmod>2021-09-13T13:50:04.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/01/securitytxt.png</image:loc><image:caption>securitytxt.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/the-danger-of-open-redirects/</loc><lastmod>2021-09-13T12:09:44.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/09/image-35.png</image:loc><image:caption>image-35.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/creating-a-house-alarm-system-with-home-assistant/</loc><lastmod>2021-09-09T11:35:04.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/09/alarm.png</image:loc><image:caption>alarm.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/setting-up-https-for-home-assistant/</loc><lastmod>2021-09-03T12:50:19.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/08/ha.png</image:loc><image:caption>ha.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/i-turned-on-csp-and-all-i-got-was-this-crappy-lawsuit/</loc><lastmod>2021-08-27T12:31:52.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/08/troll-face-1.png</image:loc><image:caption>troll-face-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/setting-up-https-on-the-unifi-nvr/</loc><lastmod>2021-08-13T14:24:09.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/08/nvr.png</image:loc><image:caption>nvr.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/introducing-data-watch-detect-magecart-style-attacks-fast/</loc><lastmod>2021-08-09T11:39:04.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/08/data-watch.png</image:loc><image:caption>data-watch.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/brotli-compression/</loc><lastmod>2021-07-07T15:30:08.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/magecart-still-going-strong-join-us-fight-back/</loc><lastmod>2021-06-16T11:29:46.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/06/script-watch-alert-1.png</image:loc><image:caption>script-watch-alert-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/introducing-script-watch-detect-magecart-style-attacks-fast/</loc><lastmod>2021-06-14T11:39:08.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/06/script-watch.png</image:loc><image:caption>script-watch.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/the-m140i-project-post-part-14/</loc><lastmod>2021-06-07T11:10:26.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/02/Screenshot_2021-02-09-datazap-me-ScottHelme-M140i-BM3-Stage-2--E30-WMI.png</image:loc><image:caption>Screenshot_2021-02-09-datazap-me-ScottHelme-M140i-BM3-Stage-2--E30-WMI.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/the-m140i-project-post-part-13/</loc><lastmod>2021-06-07T11:10:14.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/01/IMG_6114.jpeg</image:loc><image:caption>IMG_6114.jpeg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/the-m140i-project-post-part-12/</loc><lastmod>2021-06-07T11:10:04.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/12/IMG_6822-1.jpeg</image:loc><image:caption>IMG_6822-1.jpeg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/the-m140i-project-post-part-11/</loc><lastmod>2021-06-07T11:09:51.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/11/IMG_6388--4-.jpeg</image:loc><image:caption>IMG_6388--4-.jpeg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/the-m140i-project-post-part-10/</loc><lastmod>2021-06-07T11:09:33.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/09/IMG_2991-1.JPG</image:loc><image:caption>IMG_2991-1.JPG</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/the-m140i-project-post-part-9/</loc><lastmod>2021-06-07T11:09:18.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/08/IMG_3235-1.JPEG</image:loc><image:caption>IMG_3235-1.JPEG</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/the-m140i-project-post-part-8/</loc><lastmod>2021-06-07T11:08:59.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/06/IMG_2825.jpg</image:loc><image:caption>IMG_2825.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/the-m140i-project-post-part-7/</loc><lastmod>2021-06-07T11:08:49.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/05/IMG_1434.jpeg</image:loc><image:caption>IMG_1434.jpeg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/the-m140i-project-post-part-6/</loc><lastmod>2021-06-07T11:08:38.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/05/IMG_1393.jpeg</image:loc><image:caption>IMG_1393.jpeg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/the-m140i-project-post-part-5/</loc><lastmod>2021-06-07T11:08:28.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/04/IMG_0940.jpeg</image:loc><image:caption>IMG_0940.jpeg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/the-m140i-project-post-part-4/</loc><lastmod>2021-06-07T11:08:18.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/04/IMG_0957.jpeg</image:loc><image:caption>IMG_0957.jpeg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/the-m140i-project-post-part-3/</loc><lastmod>2021-06-07T11:08:05.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/04/IMG_0886.jpeg</image:loc><image:caption>IMG_0886.jpeg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/the-m140i-project-post-part-2/</loc><lastmod>2021-06-07T11:07:53.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/03/IMG_0180--1-.jpeg</image:loc><image:caption>IMG_0180--1-.jpeg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/the-m140i-project-post-part-1/</loc><lastmod>2021-06-07T11:07:36.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/03/IMG_20181026_160907_2.jpg</image:loc><image:caption>IMG_20181026_160907_2.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/securing-my-house-with-ubiquitis-unifi-protect-range/</loc><lastmod>2021-05-24T10:27:21.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/01/IMG_7958-1.jpeg</image:loc><image:caption>IMG_7958-1.jpeg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/what-the-floc/</loc><lastmod>2021-04-19T15:35:01.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/04/floc.png</image:loc><image:caption>floc.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/report-uri-data-protection-update-2021/</loc><lastmod>2021-03-23T12:00:13.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/03/Report-URI-Twitter-Card-1.png</image:loc><image:caption>Report-URI-Twitter-Card-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/enabling-coop-and-coep-reports-on-report-uri/</loc><lastmod>2021-03-10T16:44:37.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/03/coep.png</image:loc><image:caption>coep.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/catching-and-dealing-with-naughty-devices-on-my-home-network-v2/</loc><lastmod>2021-02-01T14:46:13.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/01/3.png</image:loc><image:caption>3.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/hyf-uk-tour-now-has-hotel-packages/</loc><lastmod>2021-01-29T15:00:26.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/01/hyftour.jpg</image:loc><image:caption>hyftour.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/setting-up-a-quick-and-easy-status-page-with-cloudflare-workers/</loc><lastmod>2021-01-26T13:55:35.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/01/4.png</image:loc><image:caption>4.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/running-my-own-doh-relay-and-getting-pihole/</loc><lastmod>2021-01-20T21:41:44.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2021/01/IMG_7942.PNG</image:loc><image:caption>IMG_7942.PNG</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/report-uri-penetration-test-2020/</loc><lastmod>2020-12-11T18:45:35.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/12/Report-URI-Twitter-Card.png</image:loc><image:caption>Report-URI-Twitter-Card.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/firefox-https-only-mode/</loc><lastmod>2020-11-17T20:24:16.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/11/https-only-mode-1.png</image:loc><image:caption>https-only-mode-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/deja-vu-macos-hits-ocsp-hurdles/</loc><lastmod>2020-11-16T16:54:14.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/11/le-ocsp.png</image:loc><image:caption>le-ocsp.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/lets-encrypts-new-root-and-intermediate-certificates/</loc><lastmod>2020-10-30T11:26:42.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/10/le-new-certs.png</image:loc><image:caption>le-new-certs.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/the-final-symantec-distrust-is-coming/</loc><lastmod>2020-10-22T06:52:26.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/09/symantec.png</image:loc><image:caption>symantec.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/lets-encrypt-postpone-isrg-root-transition/</loc><lastmod>2020-10-05T14:01:38.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/09/transition-1.png</image:loc><image:caption>transition-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/goodbye-feature-policy-and-hello-permissions-policy/</loc><lastmod>2020-09-07T10:04:32.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/08/784becbc-2781-4856-abb9-7262a79054ed.png</image:loc><image:caption>784becbc-2781-4856-abb9-7262a79054ed.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/top-1-million-analysis-march-2020/</loc><lastmod>2020-07-09T10:59:49.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/03/mar-2020.png</image:loc><image:caption>mar-2020.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/building-certificate-chains/</loc><lastmod>2020-07-06T12:57:14.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/06/88101148_l---Copy-1.jpg</image:loc><image:caption>88101148_l---Copy-1.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/hot-tub-wifi-machine/</loc><lastmod>2020-06-29T11:44:36.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/06/IMG_5549.jpeg</image:loc><image:caption>IMG_5549.jpeg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/cross-signing-alternate-trust-paths-how-they-work/</loc><lastmod>2020-06-22T11:12:54.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/06/dead-tree.jpg</image:loc><image:caption>dead-tree.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/complexities-chain-building-ca-infrastructure/</loc><lastmod>2020-06-15T11:29:57.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/06/chain-1.jpg</image:loc><image:caption>chain-1.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/impending-doom-root-ca-expiring-legacy-clients/</loc><lastmod>2020-06-08T15:18:00.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/06/storm-918589_1920-2.jpg</image:loc><image:caption>storm-918589_1920-2.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/launching-a-brand-new-theme/</loc><lastmod>2020-06-02T12:15:52.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/06/blog-cover-image-1.jpg</image:loc><image:caption>blog-cover-image-1.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/running-dodgy-programs-safely-with-windows-sandbox/</loc><lastmod>2020-05-22T11:16:59.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/05/sandbox.png</image:loc><image:caption>sandbox.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/boosting-my-pc-performance-whilst-working-from-home/</loc><lastmod>2020-04-30T12:14:02.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/04/image-54-1.png</image:loc><image:caption>image-54-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/my-ubiquiti-home-network-v2/</loc><lastmod>2020-04-27T11:01:04.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/04/IMG_5481--Custom-.JPEG</image:loc><image:caption>IMG_5481--Custom-.JPEG</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/upgrading-my-crawler-to-do-http-2-0-tlsv1-3-and-other-cool-stuff/</loc><lastmod>2020-04-22T09:19:55.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/04/image-42-1.png</image:loc><image:caption>image-42-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/setting-up-https-on-the-unifi-cloudkey/</loc><lastmod>2020-04-18T13:01:48.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/12/unifi-cert.png</image:loc><image:caption>unifi-cert.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/launching-smtp-tls-reporting/</loc><lastmod>2020-04-16T11:54:35.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/04/report-uri-twitter-card-1.png</image:loc><image:caption>report-uri-twitter-card-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/stabilising-failover-detection-on-the-usg/</loc><lastmod>2020-04-09T11:21:34.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/04/ubiquiti-usg.jpg</image:loc><image:caption>ubiquiti-usg.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/building-my-work-from-home-setup/</loc><lastmod>2020-04-01T09:53:17.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/03/IMG_5262-1.jpeg</image:loc><image:caption>IMG_5262-1.jpeg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/announcing-our-partnership-with-joomla-as-official-reporting-partner/</loc><lastmod>2020-03-30T08:34:59.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/03/report-uri-twitter-card-2.png</image:loc><image:caption>report-uri-twitter-card-2.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/im-looking-for-sponsors-for-my-blog-and-security-headers/</loc><lastmod>2020-03-23T12:06:43.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/03/thank-you-messages-for-help-or-support.jpg</image:loc><image:caption>thank-you-messages-for-help-or-support.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/securing-your-home-network-for-wfh/</loc><lastmod>2020-03-19T10:51:38.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/03/CyWcu8kXgAAil1q.jpg</image:loc><image:caption>CyWcu8kXgAAil1q.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/deprecating-xss-reports/</loc><lastmod>2020-03-17T13:35:43.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/03/report-uri-twitter-card-1.png</image:loc><image:caption>report-uri-twitter-card-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/pumping-up-your-internet-speeds/</loc><lastmod>2020-03-16T12:29:16.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/03/EOi8q6CX4AACfh7.jpg</image:loc><image:caption>EOi8q6CX4AACfh7.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/revocation-checking-is-pointless/</loc><lastmod>2020-03-13T15:12:55.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/03/ocsp.png</image:loc><image:caption>ocsp.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/lets-encrypt-to-revoke/</loc><lastmod>2020-03-04T17:55:05.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/03/letsencrypt.jpg</image:loc><image:caption>letsencrypt.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/certificate-lifetime-capped-to-1-year-from-sep-2020/</loc><lastmod>2020-03-03T19:46:40.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/02/HTTPS_icon.png</image:loc><image:caption>HTTPS_icon.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/supporting-other-projects-in-the-community/</loc><lastmod>2020-02-28T15:35:45.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/02/report-uri-twitter-card.png</image:loc><image:caption>report-uri-twitter-card.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/improving-email-security-with-mta-sts/</loc><lastmod>2020-02-12T07:26:26.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2019/09/report-uri-twitter-card.png</image:loc><image:caption>report-uri-twitter-card.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/legacy-tls-is-on-the-way-out/</loc><lastmod>2020-01-23T14:36:55.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/01/legacy-tls.png</image:loc><image:caption>legacy-tls.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/hpkp-is-no-more/</loc><lastmod>2020-01-20T14:24:00.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2020/01/no-entry.png</image:loc><image:caption>no-entry.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/big-https-changes-coming-in-chrome/</loc><lastmod>2019-10-07T13:51:30.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2019/10/blog-post.png</image:loc><image:caption>blog-post.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/top-1-million-analysis-september-2019/</loc><lastmod>2019-10-03T12:34:25.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2019/09/image-22-1.png</image:loc><image:caption>image-22-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/csp-nonces-the-easy-way-with-cloudflare-workers/</loc><lastmod>2019-09-12T13:58:17.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2019/09/csp-nonce-report-uri-cloudflare-worker.png</image:loc><image:caption>csp-nonce-report-uri-cloudflare-worker.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/extended-validation-not-so-extended/</loc><lastmod>2019-09-11T12:48:10.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2019/09/9F3BD7E6-3641-4AC1-9F7A-32365220640F.jpeg</image:loc><image:caption>9F3BD7E6-3641-4AC1-9F7A-32365220640F.jpeg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/ballot-sc22-reduce-certificate-lifetimes/</loc><lastmod>2019-09-10T15:31:49.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2019/09/cabforum.png</image:loc><image:caption>cabforum.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/announcing-ct-monitoring-for-report-uri/</loc><lastmod>2019-09-09T10:10:23.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2019/09/ct-report-uri.png</image:loc><image:caption>ct-report-uri.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/csrf-is-really-dead/</loc><lastmod>2019-09-06T11:33:39.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/gone-for-ever/</loc><lastmod>2019-08-12T16:26:41.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2019/08/ev-dead.png</image:loc><image:caption>ev-dead.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/thinking-more-about-bots-and-whether-we-do-enough/</loc><lastmod>2019-07-30T09:59:23.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2019/07/report-uri-twitter-card.png</image:loc><image:caption>report-uri-twitter-card.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/security-headers-updates/</loc><lastmod>2019-07-22T10:37:59.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2019/07/sechdrs.png</image:loc><image:caption>sechdrs.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/maintaining-state-in-a-cloudflare-worker-with-the-http-cache/</loc><lastmod>2019-06-17T16:03:17.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2019/06/report-uri-twitter-card.png</image:loc><image:caption>report-uri-twitter-card.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/deprecating-tlsv1-0-and-tlsv1-1-with-cloudflare-workers/</loc><lastmod>2019-05-07T16:05:29.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2019/04/firefox-1.png</image:loc><image:caption>firefox-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/lets-encrypt-to-transition-to-isrg-root/</loc><lastmod>2019-04-16T00:01:39.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2019/04/le-logo-wide-1.png</image:loc><image:caption>le-logo-wide-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/nomx-the-worlds-most-secure-communications-protocol/</loc><lastmod>2019-03-30T18:00:44.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/03/nomx-logo.png</image:loc><image:caption>nomx-logo.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/hack-yourself-first-uk-tour/</loc><lastmod>2019-03-14T12:38:31.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2019/03/Scott-Helme.jpg</image:loc><image:caption>Scott-Helme.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/alexa-top-1-million-analysis-february-2019/</loc><lastmod>2019-03-11T10:34:57.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2019/03/image-14-1.png</image:loc><image:caption>image-14-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/creating-a-twitter-follower-count-display/</loc><lastmod>2019-02-28T14:35:24.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2019/02/IMG_0137-1.jpeg</image:loc><image:caption>IMG_0137-1.jpeg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/alexa-top-1-million-analysis-august-2018/</loc><lastmod>2019-02-26T22:36:14.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/08/https-percent-1.png</image:loc><image:caption>https-percent-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/overclocking-my-my-to-extend-its-life/</loc><lastmod>2019-02-04T20:04:50.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2019/02/Core_i5.png</image:loc><image:caption>Core_i5.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/getting-cyber-essentials/</loc><lastmod>2019-01-16T12:25:45.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2019/01/ce-ncsc.png</image:loc><image:caption>ce-ncsc.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/hardening-payment-forms-with-csp/</loc><lastmod>2019-01-14T14:50:13.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/09/credit-card.png</image:loc><image:caption>credit-card.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/network-error-logging-deep-dive/</loc><lastmod>2019-01-10T16:03:33.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/10/report-uri-twitter-card-1.png</image:loc><image:caption>report-uri-twitter-card-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/dmarc-reporting-is-here/</loc><lastmod>2019-01-07T09:52:11.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2019/01/report-uri-twitter-card.png</image:loc><image:caption>report-uri-twitter-card.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/year-in-review-2019/</loc><lastmod>2019-01-01T13:34:01.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2019/01/award.png</image:loc><image:caption>award.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/we-dont-do-https-for-backwards-compatibility/</loc><lastmod>2018-12-28T10:44:05.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/12/netscape-navigator.jpg</image:loc><image:caption>netscape-navigator.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/fishing-for-certs/</loc><lastmod>2018-12-24T15:19:51.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/12/ct_home_security.png</image:loc><image:caption>ct_home_security.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/dealing-with-account-recovery-and-2fa/</loc><lastmod>2018-12-03T14:31:26.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/12/report-uri-twitter-card.png</image:loc><image:caption>report-uri-twitter-card.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/a-new-security-header-clear-site-data/</loc><lastmod>2018-11-30T13:33:16.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/11/sec-hdrs.png</image:loc><image:caption>sec-hdrs.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/unleashing-the-power-of-cloudflare-workers/</loc><lastmod>2018-11-26T13:57:01.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/11/report-uri-twitter-card-2.png</image:loc><image:caption>report-uri-twitter-card-2.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/building-a-gps-tracker-for-my-car/</loc><lastmod>2018-11-16T15:07:43.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/11/car-pic.png</image:loc><image:caption>car-pic.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/using-ghostpro-and-taking-control-of-your-cloudflare-settings/</loc><lastmod>2018-11-09T14:19:56.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/11/cloudflare-ghost.png</image:loc><image:caption>cloudflare-ghost.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/edge-to-remove-xss-auditor/</loc><lastmod>2018-11-06T14:18:25.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/11/edge.png</image:loc><image:caption>edge.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/going-async-with-azure-and-the-php-sdk-for-massive-performance/</loc><lastmod>2018-11-05T13:54:15.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/11/report-uri-twitter-card-1.png</image:loc><image:caption>report-uri-twitter-card-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/changes-to-free-accounts-on-report-uri/</loc><lastmod>2018-11-02T18:00:25.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/11/report-uri-twitter-card.png</image:loc><image:caption>report-uri-twitter-card.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/introducing-the-reporting-api-nel-other-major-changes-to-report-uri/</loc><lastmod>2018-10-22T21:15:49.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/10/report-uri-twitter-card.png</image:loc><image:caption>report-uri-twitter-card.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/upgrading-my-pc-with-a-tpm/</loc><lastmod>2018-10-19T12:44:09.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/10/tpm-chip-1.png</image:loc><image:caption>tpm-chip-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/urls-are-hard/</loc><lastmod>2018-10-12T14:19:04.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/09/no-url.png</image:loc><image:caption>no-url.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/security-and-convenience-with-biometrics-and-windows-hello/</loc><lastmod>2018-10-08T09:39:11.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/10/IMG_20181006_090853-1.jpg</image:loc><image:caption>IMG_20181006_090853-1.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/alexa-top-1-million-additional-analysis/</loc><lastmod>2018-08-29T13:52:05.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/08/php-most-popular-1.png</image:loc><image:caption>php-most-popular-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/sites-that-used-to-have-ev/</loc><lastmod>2018-08-21T10:46:10.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/08/scan.png</image:loc><image:caption>scan.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/hacking-chrome-to-look-more-awesome/</loc><lastmod>2018-08-01T16:06:36.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/07/scotthelme.co.uk-refresh-ui-1.png</image:loc><image:caption>scotthelme.co.uk-refresh-ui-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/chrome-to-the-future/</loc><lastmod>2018-07-31T21:48:03.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/07/chrome-to-the-future-1.png</image:loc><image:caption>chrome-to-the-future-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/launching-crawler-ninja/</loc><lastmod>2018-07-30T15:56:01.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/07/header.png</image:loc><image:caption>header.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/im-branching-out-and-learning-how-to-do-marketing/</loc><lastmod>2018-07-27T12:53:18.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/07/logo-2-1-1.png</image:loc><image:caption>logo-2-1-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/hacking-iot-cameras/</loc><lastmod>2018-07-25T23:25:26.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/07/Screenshot_20180726-002445__01.jpg</image:loc><image:caption>Screenshot_20180726-002445__01.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/xss-on-etherscan-io/</loc><lastmod>2018-07-25T08:22:57.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/07/xss-popup-1.png</image:loc><image:caption>xss-popup-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/one-small-step-browser-one-giant-leap-web-security/</loc><lastmod>2018-07-24T06:27:53.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/07/http-68-1.png</image:loc><image:caption>http-68-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/how-the-eu-made-our-website-slow/</loc><lastmod>2018-07-23T11:26:47.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/07/ec.png</image:loc><image:caption>ec.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/a-new-security-header-feature-policy/</loc><lastmod>2018-07-22T14:25:26.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/07/fp.png</image:loc><image:caption>fp.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/report-uri-proxy/</loc><lastmod>2018-07-17T13:04:06.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/07/logo-2-1.png</image:loc><image:caption>logo-2-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/fast-scaling-with-digitalocean/</loc><lastmod>2018-07-13T09:56:24.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/07/do.png</image:loc><image:caption>do.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/delivering-hack-yourself-first-and-finding-real-issues-whilst-training/</loc><lastmod>2018-07-09T13:18:38.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/07/hyf.png</image:loc><image:caption>hyf.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/alexa-top-1-million-analysis-february-2018/</loc><lastmod>2018-07-05T15:05:10.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/02/headers-feb-2018-1.png</image:loc><image:caption>headers-feb-2018-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/report-uri-a-week-in-numbers/</loc><lastmod>2018-07-03T13:11:19.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/07/logo2.png</image:loc><image:caption>logo2.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/hsts-preloading/</loc><lastmod>2018-07-02T10:55:42.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/lets-encrypt-is-only-a-click-away/</loc><lastmod>2018-06-25T11:54:37.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/06/IMG_20180624_175137.jpg</image:loc><image:caption>IMG_20180624_175137.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/our-journey-to-a-https-only-world/</loc><lastmod>2018-06-20T14:10:31.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/12/HTTPS_icon.png</image:loc><image:caption>HTTPS_icon.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/finding-phishing-sites-with-ct/</loc><lastmod>2018-06-18T12:53:48.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/06/ct_home_security.png</image:loc><image:caption>ct_home_security.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/https-anti-vaxxers/</loc><lastmod>2018-06-11T11:32:06.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/06/Secure.png</image:loc><image:caption>Secure.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/european-security-blogger-award-most-educational-blog/</loc><lastmod>2018-06-09T07:00:25.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/06/34416317_10155959801713702_1201969614515339264_o1.jpg</image:loc><image:caption>34416317_10155959801713702_1201969614515339264_o1.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/report-uri-is-the-best-emerging-technology-2018/</loc><lastmod>2018-06-08T15:15:21.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/06/SCAWARDS2018_europe_winner.jpg</image:loc><image:caption>SCAWARDS2018_europe_winner.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/managing-servers-with-ansible/</loc><lastmod>2018-06-01T08:09:33.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/02/ansible.png</image:loc><image:caption>ansible.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/when-logging-causes-security-incidents-what-we-learned-from-github-and-twitter/</loc><lastmod>2018-05-25T15:12:17.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/05/report-uri.png</image:loc><image:caption>report-uri.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/ct-is-coming/</loc><lastmod>2018-05-21T13:43:49.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/05/ct_home_security.png</image:loc><image:caption>ct_home_security.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/coinhive-need-to-tidy-up-their-act/</loc><lastmod>2018-05-07T14:31:20.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/05/Screenshot-2018-05-07-09.00.24.png</image:loc><image:caption>Screenshot-2018-05-07-09.00.24.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/adding-expect-ct-and-expect-staple-entries-to-the-hsts-preload-list/</loc><lastmod>2018-05-02T17:05:58.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/05/Screenshot-2018-05-02-19.05.39.png</image:loc><image:caption>Screenshot-2018-05-02-19.05.39.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/csrf-is-dead/</loc><lastmod>2018-04-24T08:16:36.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/the-power-to-revoke-lies-with-the-ca/</loc><lastmod>2018-04-23T12:30:30.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/04/https.png</image:loc><image:caption>https.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/you-can-now-sponsor-scotthelme-co-uk/</loc><lastmod>2018-04-20T10:20:11.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/04/sponsor-image.png</image:loc><image:caption>sponsor-image.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/catching-naughty-devices-on-my-home-network/</loc><lastmod>2018-04-18T10:42:37.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/04/pi-hole-dashboard-1.png</image:loc><image:caption>pi-hole-dashboard-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/cloudflare-workers-report-uri/</loc><lastmod>2018-04-16T10:26:58.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/04/cfworkers.png</image:loc><image:caption>cfworkers.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/security-headers-is-changing-domain-and-branding/</loc><lastmod>2018-04-13T09:43:31.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/04/new-site-1.png</image:loc><image:caption>new-site-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/securing-dns-across-all-of-my-devices-with-pihole-dns-over-https-1-1-1-1/</loc><lastmod>2018-04-13T06:49:20.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/04/pi-hole-admin-http-1.png</image:loc><image:caption>pi-hole-admin-http-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/report-uri-csp-wizard/</loc><lastmod>2018-04-02T23:09:11.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/04/logo-full.png</image:loc><image:caption>logo-full.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/introducing-xss-reporting-to-report-uri/</loc><lastmod>2018-03-20T13:25:58.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/03/logo-full.png</image:loc><image:caption>logo-full.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/security-headers-cloudflare-worker/</loc><lastmod>2018-03-19T18:47:10.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/03/security-headers-front-page.png</image:loc><image:caption>security-headers-front-page.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/debunking-the-fallacy-that-paid-certificates-are-better-than-free-certificates-and-other-related-nonsense/</loc><lastmod>2018-03-06T15:43:17.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/03/emoji.png</image:loc><image:caption>emoji.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/when-crawlers-are-hungry-for-porn/</loc><lastmod>2018-03-02T18:05:37.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/03/scan-box.png</image:loc><image:caption>scan-box.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/do-ssl-warranties-protect-you-as-much-as-rocks-keep-tigers-away/</loc><lastmod>2018-02-28T21:36:20.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/02/warranty.jpg</image:loc><image:caption>warranty.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/why-we-need-to-do-more-to-reduce-certificate-lifetimes/</loc><lastmod>2018-02-23T11:25:33.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/02/https-icon.png</image:loc><image:caption>https-icon.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/seasonal-variations-in-ev-efficiency/</loc><lastmod>2018-02-19T20:21:52.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/02/leaf.png</image:loc><image:caption>leaf.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/are-you-ready-for-the-symantec-distrust/</loc><lastmod>2018-02-16T18:46:07.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/02/symantec-1.png</image:loc><image:caption>symantec-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/protect-site-from-cryptojacking-csp-sri/</loc><lastmod>2018-02-14T08:21:55.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/02/ico-offline.png</image:loc><image:caption>ico-offline.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/year-in-review-2016/</loc><lastmod>2018-02-05T16:21:38.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/10/location-pin.jpg</image:loc><image:caption>location-pin.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/hacking-table-storage-to-do-order-by-on-timestamp/</loc><lastmod>2018-02-05T13:37:51.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/02/microsoft-azure-new-logo-2017.png</image:loc><image:caption>microsoft-azure-new-logo-2017.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/launching-report-uri-js/</loc><lastmod>2018-01-31T20:35:57.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/01/logo-full.png</image:loc><image:caption>logo-full.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/https-deployment-tips/</loc><lastmod>2018-01-29T13:56:16.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/01/HTTPS_icon-1.png</image:loc><image:caption>HTTPS_icon-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/optimising-twitters-csp-header/</loc><lastmod>2018-01-22T14:32:29.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/01/twitter-banner.jpg</image:loc><image:caption>twitter-banner.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/we-need-more-phishing-sites-on-https/</loc><lastmod>2018-01-19T16:44:32.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/01/HTTPS_icon.png</image:loc><image:caption>HTTPS_icon.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/hacking-table-storage-like-queries/</loc><lastmod>2018-01-15T14:02:51.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/01/microsoft-azure-new-logo-2017.png</image:loc><image:caption>microsoft-azure-new-logo-2017.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/how-we-turned-average-joe-into-psychic-joe/</loc><lastmod>2018-01-08T15:16:22.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2018/01/click-live-1.png</image:loc><image:caption>click-live-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/powerful-filtering-and-other-updates-for-report-uri/</loc><lastmod>2018-01-05T20:54:03.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/12/logo-2.svg</image:loc><image:caption>logo-2.svg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/designing-a-new-security-header-expect-staple/</loc><lastmod>2018-01-05T19:28:34.000Z</lastmod><image:image><image:loc>https://scotthelme.co.uk/content/images/2016/10/stapler.jpg</image:loc><image:caption>stapler.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/year-in-review-2017/</loc><lastmod>2017-12-29T16:09:07.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/12/IMG_20170722_235652_01-EFFECTS.jpg</image:loc><image:caption>IMG_20170722_235652_01-EFFECTS.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/overcoming-the-hurdles-of-vat-and-vat-moss-in-the-eu/</loc><lastmod>2017-12-22T14:46:13.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/12/logo-1.svg</image:loc><image:caption>logo-1.svg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/ee-brightbox-router-hacked/</loc><lastmod>2017-12-22T13:21:06.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/12/1526141_10151933385753702_917965817_n.jpg</image:loc><image:caption>1526141_10151933385753702_917965817_n.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/bypassing-hsts-or-hpkp-in-chrome-is-a-badidea/</loc><lastmod>2017-12-21T12:11:46.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/12/https.jpg</image:loc><image:caption>https.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/malware-hunting-with-csp/</loc><lastmod>2017-12-18T19:30:06.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/12/logo.svg</image:loc><image:caption>logo.svg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/tracking-caa-usage/</loc><lastmod>2017-12-15T15:08:25.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/12/caa-graph-1.png</image:loc><image:caption>caa-graph-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/mitigating-http-get-dos-attack/</loc><lastmod>2017-12-12T08:17:15.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/getting-an-a-on-the-qualys-ssl-test-windows-edition/</loc><lastmod>2017-12-11T15:20:56.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2015/09/qualys-a.png</image:loc><image:caption>qualys-a.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/are-ev-certificates-worth-the-paper-theyre-written-on/</loc><lastmod>2017-12-05T08:35:24.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/12/hibp.png</image:loc><image:caption>hibp.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/report-uri-journey-to-a-permanent-redirect/</loc><lastmod>2017-11-24T11:55:52.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/11/logo.svg</image:loc><image:caption>logo.svg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/wifi-pineapple-setup/</loc><lastmod>2017-11-22T20:17:26.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/adding-security-headers-to-prism-js/</loc><lastmod>2017-11-10T14:20:06.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/08/pretty-security-headers.png</image:loc><image:caption>pretty-security-headers.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/the-next-steps-for-report-uri-io/</loc><lastmod>2017-11-01T13:02:18.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/10/logo-1.svg</image:loc><image:caption>logo-1.svg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/the-death-knell-for-hpkp/</loc><lastmod>2017-10-27T21:04:49.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/sarahah/</loc><lastmod>2017-10-24T22:50:28.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/10/Sarahah-rich.png</image:loc><image:caption>Sarahah-rich.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/a-new-security-header-expect-ct/</loc><lastmod>2017-10-19T17:28:15.000Z</lastmod><image:image><image:loc>https://scotthelme.co.uk/content/images/2017/02/ct_home_security.png</image:loc><image:caption>ct_home_security.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/security-expose-match-com/</loc><lastmod>2017-10-17T06:10:12.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/you-can-now-support-me-on-patreon/</loc><lastmod>2017-10-04T08:47:55.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/new-grading-on-securityheaders-io/</loc><lastmod>2017-09-20T11:31:43.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/09/Screenshot-2017-09-20-13.31.11.png</image:loc><image:caption>Screenshot-2017-09-20-13.31.11.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/hardening-your-http-response-headers/</loc><lastmod>2017-09-15T07:12:02.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/moving-to-ghost-pro/</loc><lastmod>2017-09-04T16:03:22.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/09/ghost.png</image:loc><image:caption>ghost.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/alexa-top-1-million-analysis-aug-2017/</loc><lastmod>2017-08-30T10:25:04.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/08/security-headers-aug-2017-1.png</image:loc><image:caption>security-headers-aug-2017-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/im-giving-up-on-hpkp/</loc><lastmod>2017-08-24T09:36:04.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/08/hpkp-aug-2017.png</image:loc><image:caption>hpkp-aug-2017.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/my-week-in-vegas/</loc><lastmod>2017-08-23T20:56:09.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/08/IMG_20170727_214921.jpg</image:loc><image:caption>IMG_20170727_214921.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/what-happens-in-vegas/</loc><lastmod>2017-08-19T16:21:08.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/08/what-happens-in-vegas.png</image:loc><image:caption>what-happens-in-vegas.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/fear-and-coding-in-las-vegas/</loc><lastmod>2017-08-19T15:45:55.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/08/feat-and-coding-in-las-vegas.png</image:loc><image:caption>feat-and-coding-in-las-vegas.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/wifi-insecurity-wps/</loc><lastmod>2017-08-11T19:07:30.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/vpn-security-privacy-online/</loc><lastmod>2017-08-11T19:07:18.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/windows-xp-end-of-support/</loc><lastmod>2017-08-11T19:06:46.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/wifi-pineapple-mark-v-introduction-setup/</loc><lastmod>2017-08-11T19:06:33.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/linkedin-intro/</loc><lastmod>2017-08-11T19:06:20.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/wifi-insecurity-wifi-map/</loc><lastmod>2017-08-11T19:06:07.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/the-adobe-hack/</loc><lastmod>2017-08-11T19:05:54.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/manually-enforcing-hsts-chrome/</loc><lastmod>2017-08-11T19:04:09.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/issuing-hsts-policy-in-php/</loc><lastmod>2017-08-11T19:03:45.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/web-security-rightmove-zoopla/</loc><lastmod>2017-08-11T19:03:19.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/hsts-polish-dns-hijacking-attack/</loc><lastmod>2017-08-11T18:58:23.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/tls-conundrum-and-leaving-cloudflare/</loc><lastmod>2017-08-11T18:57:40.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/public-wifi-hotspots/</loc><lastmod>2017-08-11T18:56:27.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/setting-up-hsts-in-nginx/</loc><lastmod>2017-08-11T18:55:13.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/ocsp-stapling-speeding-up-ssl/</loc><lastmod>2017-08-11T18:54:32.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/replacing-dyndns-cloudflare-ddns/</loc><lastmod>2017-08-11T18:54:05.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/certificate-revocation-google-chrome/</loc><lastmod>2017-08-11T15:01:34.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/a-plus-rating-qualys-ssl-test/</loc><lastmod>2017-08-11T15:00:51.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2015/09/qualys-a-1.png</image:loc><image:caption>qualys-a-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/perfect-forward-secrecy/</loc><lastmod>2017-08-11T14:54:09.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/trusting-security-in-smartphone-apps/</loc><lastmod>2017-08-11T14:52:03.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/make-website-faster-spdy/</loc><lastmod>2017-08-11T14:50:27.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/hotel-hippo-insecure/</loc><lastmod>2017-08-11T14:49:22.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/encrypted-email-is-easy/</loc><lastmod>2017-08-11T14:48:04.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/encrypted-email-android-phone/</loc><lastmod>2017-08-11T14:46:53.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/ssl-does-not-make-site-secure/</loc><lastmod>2017-08-11T14:46:15.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/explaining-ddos-attacks/</loc><lastmod>2017-08-11T14:41:13.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/goodbye-wordpress-hello-ghost/</loc><lastmod>2017-08-11T14:37:45.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/squeezing-a-little-more-out-of-your-qualys-score/</loc><lastmod>2017-08-11T14:35:23.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/cloudflares-great-new-features-and-why-i-wont-use-them/</loc><lastmod>2017-08-11T14:34:06.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/do-browsers-tell-us-enough-about-secure-connections/</loc><lastmod>2017-08-11T14:08:05.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/sslv3-goes-to-the-dogs-poodle-kills-off-protocol/</loc><lastmod>2017-08-11T14:07:14.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/pagespeed-performance-optimisation-made-easy/</loc><lastmod>2017-08-11T14:04:59.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/hpkp-http-public-key-pinning/</loc><lastmod>2017-08-11T13:57:11.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2015/09/hpkp-twitter-card.png</image:loc><image:caption>hpkp-twitter-card.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/introducing-securityheaders-io/</loc><lastmod>2017-08-11T13:54:00.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2015/09/security-headers-io.png</image:loc><image:caption>security-headers-io.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/creating-a-pgp-contact-form/</loc><lastmod>2017-08-11T13:53:20.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/csp-and-hpkp-violation-reporting-with-report-uri-io/</loc><lastmod>2017-08-11T13:45:43.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2015/09/logo-twitter-card-2.png</image:loc><image:caption>logo-twitter-card-2.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/infosecurity-badge-encryption/</loc><lastmod>2017-08-11T13:44:53.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2015/09/infosec-europe.jpeg</image:loc><image:caption>infosec-europe.jpeg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/choosing-and-using-azure-table-storage-for-report-uri-io/</loc><lastmod>2017-08-11T13:44:29.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2015/09/azure-twitter-card.png</image:loc><image:caption>azure-twitter-card.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/combat-ad-injectors-with-csp/</loc><lastmod>2017-08-11T13:42:58.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2015/09/amazon-twitter-card.png</image:loc><image:caption>amazon-twitter-card.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/chrome-address-spoofing-poc/</loc><lastmod>2017-08-11T13:35:46.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2015/09/fb-twitter-card.png</image:loc><image:caption>fb-twitter-card.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/steelcon-2015/</loc><lastmod>2017-08-11T13:34:48.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2015/09/steelcon-twitter-card.png</image:loc><image:caption>steelcon-twitter-card.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/working-with-azure-table-storage/</loc><lastmod>2017-08-11T13:29:19.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2015/09/using-azure-twitter-card.png</image:loc><image:caption>using-azure-twitter-card.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/major-update-for-report-uri-io/</loc><lastmod>2017-08-11T13:27:34.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2015/09/logo-twitter-card-1.png</image:loc><image:caption>logo-twitter-card-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/offloading-php-session-storage-to-azure-table-storage/</loc><lastmod>2017-08-11T13:26:32.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2015/09/php-store-twitter-card.png</image:loc><image:caption>php-store-twitter-card.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/demonstrating-hpkp-validation-failures/</loc><lastmod>2017-08-11T13:25:31.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2015/09/hpkp-chrome-twitter-card.png</image:loc><image:caption>hpkp-chrome-twitter-card.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/how-widely-used-are-security-based-http-response-headers/</loc><lastmod>2017-08-11T13:18:38.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2015/09/header-utilisation.png</image:loc><image:caption>header-utilisation.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/running-the-numbers-on-report-uri-io/</loc><lastmod>2017-08-11T13:17:39.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2015/09/logo-twitter-card.png</image:loc><image:caption>logo-twitter-card.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/hpkp-toolset/</loc><lastmod>2017-08-11T13:16:38.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2015/09/hpkp-toolset-twitter-card.png</image:loc><image:caption>hpkp-toolset-twitter-card.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/guidance-on-setting-up-hpkp/</loc><lastmod>2017-08-11T13:16:01.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2015/09/hpkp-twitter-card-1.png</image:loc><image:caption>hpkp-twitter-card-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/safari-doesnt-like-csp/</loc><lastmod>2017-08-11T13:15:20.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2015/09/safari-twitter-card.png</image:loc><image:caption>safari-twitter-card.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/subresource-integrity/</loc><lastmod>2017-08-11T13:13:25.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/http-2-is-here/</loc><lastmod>2017-08-10T21:39:40.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/migrating-from-http-to-https-ease-the-pain-with-csp-and-hsts/</loc><lastmod>2017-08-10T21:36:43.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2015/10/dubious-as-neutral-1.png</image:loc><image:caption>dubious-as-neutral-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/further-improvements-to-report-uri-io/</loc><lastmod>2017-08-10T21:31:32.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2015/10/graphs-new-1.png</image:loc><image:caption>graphs-new-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/supporting-http-2-with-nginx/</loc><lastmod>2017-08-10T21:26:52.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/monitoring-http-2-usage-in-the-wild/</loc><lastmod>2017-08-10T21:26:08.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2015/11/http-protocol-usage-1.png</image:loc><image:caption>http-protocol-usage-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/launching-the-new-version-of-securityheaders-io/</loc><lastmod>2017-08-10T21:20:29.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2015/12/a-.png</image:loc><image:caption>a-.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/setting-up-le/</loc><lastmod>2017-08-10T21:19:12.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2015/12/letsencrypt.jpg</image:loc><image:caption>letsencrypt.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/scoring-transparency-on-securityheaders-io/</loc><lastmod>2017-08-10T21:14:29.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/01/security-headers.png</image:loc><image:caption>security-headers.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/micro-optimisation-for-fun/</loc><lastmod>2017-08-10T21:13:49.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/02/home-page-without-headers.png</image:loc><image:caption>home-page-without-headers.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/lets-encrypt-smart-renew/</loc><lastmod>2017-08-10T21:12:19.000Z</lastmod><image:image><image:loc>https://scotthelme.co.uk/content/images/2015/12/letsencrypt-1.jpg</image:loc><image:caption>letsencrypt-1.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/securityheaders-io-update/</loc><lastmod>2017-08-10T21:11:26.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/02/security-headers.png</image:loc><image:caption>security-headers.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/security-headers-alexa-top-million/</loc><lastmod>2017-08-10T21:10:11.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/02/full-graph-1.png</image:loc><image:caption>full-graph-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/the-securityheaders-io-chrome-extension/</loc><lastmod>2017-08-10T21:06:25.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/02/sec-headers-post-image.png</image:loc><image:caption>sec-headers-post-image.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/server-and-app-health-monitoring-new-relic/</loc><lastmod>2017-08-10T21:04:43.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/03/NewRelic-logo-square.png</image:loc><image:caption>NewRelic-logo-square.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/csrf-protection-in-framework/</loc><lastmod>2017-08-10T20:58:32.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/03/codeigniter.png</image:loc><image:caption>codeigniter.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/performance-optimising-for-azure-table-storage/</loc><lastmod>2017-08-10T20:55:18.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/04/logo-big-link-60-p.png</image:loc><image:caption>logo-big-link-60-p.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/ecdsa-certificates/</loc><lastmod>2017-08-10T20:54:20.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/04/image02_1.png</image:loc><image:caption>image02_1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/sites-tell-us-store-password/</loc><lastmod>2017-08-10T20:53:00.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/06/logo-big-link-60-p.png</image:loc><image:caption>logo-big-link-60-p.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/hybrid-rsa-and-ecdsa-certificates-with-nginx/</loc><lastmod>2017-08-10T20:52:06.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/05/letsencrypt-logo-horizontal.svg</image:loc><image:caption>letsencrypt-logo-horizontal.svg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/alexa-top-1-million-crawl-aug-2016/</loc><lastmod>2017-08-10T20:49:38.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/08/overall-results.png</image:loc><image:caption>overall-results.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/short-urls-for-securityheaders-io/</loc><lastmod>2017-08-10T20:47:29.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/07/security-headers.png</image:loc><image:caption>security-headers.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/one-password-reset-to-rule-them-all/</loc><lastmod>2017-08-10T20:43:28.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/07/1de369ac99f5a6ecd6fbe78c8d99cc1d_400x400.png</image:loc><image:caption>1de369ac99f5a6ecd6fbe78c8d99cc1d_400x400.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/hsts-preload-test/</loc><lastmod>2017-08-10T20:41:15.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/07/preload-image.png</image:loc><image:caption>preload-image.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/keep-cyber-criminals-at-bay-use-2fa/</loc><lastmod>2017-08-10T20:34:22.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/08/google-2sv.png</image:loc><image:caption>google-2sv.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/should-we-tighten-up-security-on-our-cdns/</loc><lastmod>2017-08-10T20:33:13.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/08/cdnjs-jquery-1.png</image:loc><image:caption>cdnjs-jquery-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/death-by-copy-paste/</loc><lastmod>2017-08-10T18:14:58.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/08/radioactive-1.jpg</image:loc><image:caption>radioactive-1.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/using-security-features-to-do-bad-things/</loc><lastmod>2017-08-10T18:06:56.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/08/scales.png</image:loc><image:caption>scales.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/just-how-much-traffic-can-you-generate-using-csp/</loc><lastmod>2017-08-10T17:57:37.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/08/logo-twitter.png</image:loc><image:caption>logo-twitter.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/securityheaders-io-updates/</loc><lastmod>2017-08-10T17:55:18.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/08/security-headers.png</image:loc><image:caption>security-headers.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/time-for-a-refresh/</loc><lastmod>2017-08-10T17:54:16.000Z</lastmod><image:image><image:loc>https://scotthelme.co.uk/content/images/2016/09/new-theme.png</image:loc><image:caption>new-theme.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/the-encryted-web-is-coming/</loc><lastmod>2017-08-10T17:54:01.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/02/HTTPS_icon.png</image:loc><image:caption>HTTPS_icon.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/introducing-sensible-limits-to-report-uri-io/</loc><lastmod>2017-08-10T17:53:07.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/05/logo-big-link-60-p-1.png</image:loc><image:caption>logo-big-link-60-p-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/yahoo-the-largest-breach-in-history/</loc><lastmod>2017-08-10T17:52:56.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/09/yahoo-logo-1.png</image:loc><image:caption>yahoo-logo-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/end-to-end-encryption-with-facebook-messenger/</loc><lastmod>2017-08-10T17:52:37.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/09/messenger-icon-1.png</image:loc><image:caption>messenger-icon-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/caching-ghost-with-nginx/</loc><lastmod>2017-08-10T17:45:48.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/09/nginx-logo-2.png</image:loc><image:caption>nginx-logo-2.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/signal-for-desktop-is-here/</loc><lastmod>2017-08-10T17:43:55.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/09/signal-desktop-icon-1.png</image:loc><image:caption>signal-desktop-icon-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/wifi-wardriving/</loc><lastmod>2017-08-10T17:41:39.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/08/wardriving-setup.jpg</image:loc><image:caption>wardriving-setup.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/wardriving-results/</loc><lastmod>2017-08-10T17:40:24.000Z</lastmod><image:image><image:loc>https://scotthelme.co.uk/content/images/2016/08/wardriving-setup.jpg</image:loc><image:caption>wardriving-setup.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/accelerated-mobile-pages/</loc><lastmod>2017-08-10T17:39:53.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/09/amp-logo.png</image:loc><image:caption>amp-logo.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/https-scotthelme-co-uk/</loc><lastmod>2017-08-10T17:39:17.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/10/subdomain.png</image:loc><image:caption>subdomain.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/easy-cheap-and-secure-backup-with-google-cloud-platform/</loc><lastmod>2017-08-10T17:38:54.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/10/gcp-1.png</image:loc><image:caption>gcp-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/email-security-spf/</loc><lastmod>2017-08-10T17:36:44.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/email-security-dkim/</loc><lastmod>2017-08-10T17:36:15.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/securityheaders-io-updates-and-sponsorship/</loc><lastmod>2017-08-10T17:35:24.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/12/twitter.png</image:loc><image:caption>twitter.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/email-security-dmarc/</loc><lastmod>2017-08-10T17:34:16.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/the-best-tls-training-in-the-world-coming-up-north/</loc><lastmod>2017-08-10T17:33:17.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/12/20161019_153122.jpg</image:loc><image:caption>20161019_153122.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/why-closing-port-80-is-bad-for-security/</loc><lastmod>2017-08-10T17:33:00.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/12/HTTPS_icon.png</image:loc><image:caption>HTTPS_icon.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/driving-an-electric-vehicle-the-nissan-leaf/</loc><lastmod>2017-08-10T17:20:59.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/11/gen-2.jpg</image:loc><image:caption>gen-2.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/using-alexa-to-control-my-car/</loc><lastmod>2017-08-10T17:18:58.000Z</lastmod><image:image><image:loc>https://scotthelme.co.uk/content/images/2016/11/gen-2.jpg</image:loc><image:caption>gen-2.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/my-ubiquiti-home-network/</loc><lastmod>2017-08-10T17:16:10.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/11/unifi-ap-ac-pro.png</image:loc><image:caption>unifi-ap-ac-pro.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/doing-the-chacha-with-nginx/</loc><lastmod>2017-08-10T17:11:19.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/12/chacha-negotiated.png</image:loc><image:caption>chacha-negotiated.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/enforcing-the-use-of-sri/</loc><lastmod>2017-08-10T17:06:49.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/01/sri.jpg</image:loc><image:caption>sri.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/csp-nonce-support-in-nginx/</loc><lastmod>2017-08-10T17:02:37.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/08/NGINX_logo_rgb-01-1.png</image:loc><image:caption>NGINX_logo_rgb-01-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/bug-bounties-and-extortion/</loc><lastmod>2017-08-10T17:00:55.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/ocsp-must-staple/</loc><lastmod>2017-08-10T17:00:28.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/10/stapler.jpg</image:loc><image:caption>stapler.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/ocsp-expect-staple/</loc><lastmod>2017-08-10T16:59:56.000Z</lastmod><image:image><image:loc>https://scotthelme.co.uk/content/images/2016/10/stapler.jpg</image:loc><image:caption>stapler.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/a-new-security-header-referrer-policy/</loc><lastmod>2017-08-10T16:59:31.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/02/grade-a-1.png</image:loc><image:caption>grade-a-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/alexa-top-1-million-analysis-feb-2017/</loc><lastmod>2017-08-10T16:55:08.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/02/https.png</image:loc><image:caption>https.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/azure-functions-with-the-php-storage-sdk/</loc><lastmod>2017-08-10T16:53:48.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/09/azure-function.png</image:loc><image:caption>azure-function.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/launching-my-new-server-monitoring-dashboard-horizon/</loc><lastmod>2017-08-10T16:51:50.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/03/horizon.png</image:loc><image:caption>horizon.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/lets-encrypt-are-enabling-the-bad-guys-and-why-they-should/</loc><lastmod>2017-08-10T16:46:35.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/03/le-logo-wide-1.png</image:loc><image:caption>le-logo-wide-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/weekend-project-server-upgrade/</loc><lastmod>2017-08-10T16:45:32.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/03/IMG_20170310_171014.jpg</image:loc><image:caption>IMG_20170310_171014.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/weekend-project-macbook-pro-upgrade/</loc><lastmod>2017-08-10T16:45:10.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/03/IMG_20170310_193358.jpg</image:loc><image:caption>IMG_20170310_193358.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/report-uri-io-new-features-new-reports-new-tools/</loc><lastmod>2017-08-10T16:44:42.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/03/report-uri.png</image:loc><image:caption>report-uri.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/report-uri-io-needs-your-support/</loc><lastmod>2017-08-10T16:44:05.000Z</lastmod><image:image><image:loc>https://scotthelme.co.uk/content/images/2017/03/report-uri.png</image:loc><image:caption>report-uri.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/csp-reports-now-indicate-their-disposition/</loc><lastmod>2017-08-10T16:43:33.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/03/logo.png</image:loc><image:caption>logo.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/publishing-my-daily-crawler-data-for-wider-analysis/</loc><lastmod>2017-08-10T16:42:38.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/03/downloads-1.png</image:loc><image:caption>downloads-1.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/certificate-authority-authorization/</loc><lastmod>2017-08-10T16:42:29.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/imperva-incapsula-are-now-supporting-report-uri-io/</loc><lastmod>2017-08-10T16:42:19.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/02/incapsula-website-security-and-acceleration-logo.png</image:loc><image:caption>incapsula-website-security-and-acceleration-logo.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/how-i-almost-burnt-my-house-down-with-a-genuine-macbook-charger/</loc><lastmod>2017-08-10T16:32:54.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/05/IMG_20170515_113348-1.jpg</image:loc><image:caption>IMG_20170515_113348-1.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/analysing-massive-traffic-volumes-on-report-uri-io/</loc><lastmod>2017-08-10T16:31:42.000Z</lastmod><image:image><image:loc>https://scotthelme.co.uk/content/images/2017/03/ingress-data.png</image:loc><image:caption>ingress-data.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/customising-server-header-over-http-2-in-nginx/</loc><lastmod>2017-08-10T16:30:06.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/08/NGINX_logo_rgb-01.png</image:loc><image:caption>NGINX_logo_rgb-01.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/lets-encrypt-with-dns-round-robin/</loc><lastmod>2017-08-10T16:30:00.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/07/le-logo-lockonly.png</image:loc><image:caption>le-logo-lockonly.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/steelcon-2017/</loc><lastmod>2017-08-10T16:29:49.000Z</lastmod><image:image><image:loc>https://scotthelme.co.uk/content/images/2017/07/_W6C5578.jpg</image:loc><image:caption>_W6C5578.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/revocation-is-broken/</loc><lastmod>2017-08-10T16:29:35.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/how-to-revoke-a-lets-encrypt-certificate/</loc><lastmod>2017-08-10T16:29:02.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2017/06/le-logo-standard.png</image:loc><image:caption>le-logo-standard.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/why-my-blog-is-creative-commons-licensed/</loc><lastmod>2017-08-10T16:28:36.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/02/creative_commons.jpg</image:loc><image:caption>creative_commons.jpg</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/advanced-session-hijacking/</loc><lastmod>2016-09-26T21:50:06.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/better-performance-and-custom-subdomains-on-report-uri-io/</loc><lastmod>2016-03-25T14:07:21.000Z</lastmod><image:image><image:loc>https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/2016/03/logo-big-link-60-p.png</image:loc><image:caption>logo-big-link-60-p.png</image:caption></image:image></url><url><loc>https://scotthelme.co.uk/wifi-insecurity-wep/</loc><lastmod>2014-08-19T21:33:52.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/wifi-insecurity-wpa/</loc><lastmod>2014-08-19T21:33:46.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/privacy-settings-on-facebook/</loc><lastmod>2014-08-13T15:01:08.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/android-location-services/</loc><lastmod>2014-08-13T14:59:32.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/facebook-privacy-settings-explained/</loc><lastmod>2014-08-13T14:58:05.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/password-reminders-are-bad/</loc><lastmod>2014-08-13T14:50:43.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/speed-and-security-from-cloudflare/</loc><lastmod>2014-08-13T14:46:24.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/subway-takes-sandwiches-seriously-not-security/</loc><lastmod>2014-08-13T14:44:03.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/sql-injection-the-basics/</loc><lastmod>2014-08-13T14:41:49.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/session-hijacking-ssl-doesnt-mean-secure/</loc><lastmod>2014-08-13T14:38:14.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/tor-anonymity-online/</loc><lastmod>2014-08-13T14:35:32.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/exif-and-geotagging/</loc><lastmod>2014-08-13T14:18:59.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/ssl-about-integrity-too/</loc><lastmod>2014-08-13T14:05:40.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/wifi-pineapple-usb-storage-and-infusions/</loc><lastmod>2014-08-13T13:50:04.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/wifi-pineapple-occupineapple/</loc><lastmod>2014-08-13T13:45:54.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/storing-passwords-in-browser/</loc><lastmod>2014-08-13T13:40:57.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/password-security/</loc><lastmod>2014-08-13T13:36:50.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/wifi-pineapple-karma-dnsspoof/</loc><lastmod>2014-08-13T12:01:30.000Z</lastmod></url><url><loc>https://scotthelme.co.uk/wifi-pineapple-karma-sslstrip/</loc><lastmod>2014-08-13T11:45:37.000Z</lastmod></url></urlset>