Free Post Security Headers Can you get pwned with CSS? I recently started to consider changing the grading criteria on Security Headers which isn't something that happens very often. I wanted to make a change that would result in more...
Free Post Crawler Report Top 1 Million Analysis - November 2021 Wow! It's been quite a while since I've had time to do my regular analysis of security in the Top 1 Million site, but it's happening again! As it's been...
Free Post FLoC What the FLoC?! There have been quite a few mentions of FLoC recently and several people have been providing various links, bits of information and questions about the new feature. Whilst it's still...
Free Post Report URI Enabling COOP and COEP reports on Report URI A couple of months ago I talked about a few new features coming to a browser near you that included both COOP and COEP. With the latest version of Chrome...
Free Post CORP COEP COOP CORP CORS CORB - CRAP that's a lot of new stuff! Yep, you heard it right, we have a few new security features and even some new Security Headers in town! Whilst technically only COOP, COEP, CORP and CORB are new,...
Free Post Security Headers Goodbye Feature Policy and hello Permissions Policy! I talked about Feature Policy [https://scotthelme.co.uk/a-new-security-header-feature-policy/] almost 2 years ago and it has seen great adoption since then. As things have progressed a name change has...
Free Post Security Headers Top 1 Million Analysis - March 2020 It's time for another 6 month update on the state of security online that's a little late! This is the second report using the new data source that was announced...
Free Post Security Headers Security Headers Updates I've just deployed a few changes to Security Headers to bring it up to date with recent changes in the industry. Here are the details and how they might affect...
Free Post Security Headers A new Security Header: Clear Site Data I was debating whether or not to call Clear Site Data a Security Header but in the end I decided I would. During the use of a web app we...
Free Post Feature Policy A new security header: Feature Policy We have a new Security Header!! Feature Policy will allow a site to enable or disable certain browser features and APIs in the interest of better security and privacy. Let's...
