Free Post DBSC Device Bound Session Credentials lands in Chrome on macOS Device Bound Session Credentials (DBSC) is Chrome's answer to session cookie theft, usually by InfoStealer malware. Instead of a cookie being a bearer token that works anywhere it&...
Free Post DBSC Everything I Learned Shipping Device Bound Session Credentials We shipped Device Bound Session Credentials at Report URI, open-sourced the server-side implementation, and then discovered a long list of things the specification doesn't prepare you...
Free Post CSP Overriding HTTP Response Headers in Chrome Dev Tools There's a new feature in Chrome Dev Tools that's going to make it easier than ever to get started with Security Headers like Content Security Policy!...
Free Post HTTPS Goodbye, old friend 👋🔒 It's been a really long time coming, but, the end is finally here for the padlock icon in the address bar! 🔒🚫 A Long Road Wow, where do I...
Free Post tls Big HTTPS changes coming in Chrome Chrome has certainly been one of the main contributors towards the recent push to HTTPS online and without their contribution, I do find myself wondering how much progress would have...
Free Post chrome URLs are hard, let's kill them We've seen a couple of changes in the Chrome UI recently and one of them attracted some pretty fierce criticism online rather quickly. With the removal of some...
Free Post HTTPS Hacking Chrome to Look More Awesome! I've been playing around with a few of the 'hidden' flags in the Chrome browser and I've come up with a selection of settings...
Free Post chrome Chrome to the future We recently saw the release of Chrome 68 which brought with it a default 'Not Secure' warning on all HTTP pages. This change appears to have come as...
Free Post HTTP One small step for a browser, one giant leap for web security! With the release of Chrome 68 we're seeing a fundamental shift in our expectations of security on the Web, we will now see the 'Not Secure'...
Free Post chrome Adding Expect-CT and Expect-Staple entries to the HSTS Preload List Two of the new reporting features in https://report-uri.com currently require additions to the HSTS Preload List in Chromium. Here's a quick guide on how to...
Follow