HTTP Response Header | ellipsis-infosec

Jeremy Druin

How to Check HTTP Headers

HTTP response headers can impact the user experience and the security of the web or mobile application. Server administrators can...

Jeremy Druin

What is Content Security Policy?

Content Security Policy (CSP) is a security framework built into the browser. CSP allows the browser to block content from sources other...

Jeremy Druin

Yum! Secure Cookies

Cookie security is an oxymoron. Cookies exist in the browser; an inherently insecure location. However, there are several best-practices...

Jeremy Druin

How HTTP Headers impact Application Security (by Example)

Web server configuration can impact the security of the web site and underlying application. These headers can be confusing so it is not...

Jeremy Druin

Demystifying the HTTP Strict Transport Security (HSTS) Header

Ideally, web sites would run exclusively over HTTPS. In the future, we might find sites avoiding HTTP entirely using one of the following...