Security headers on 4,688 small-business websites: 49.7% met none of 7 criteria rackcrunch.com 14 points by terrybyte 1 hour ago
aetherspawn 19 minutes ago It’s ridiculous that the answer to a secure web is for everyone to sprinkle the magic salt and not something on the browser side alserio 6 minutes ago we'd need an epoch like reset to good defaults
GaProgMan 13 minutes ago And if any of the websites use .NET, they can get almost all of the recommended security headers in one line by using a NuGet package I created: https://gaprogman.github.io/OwaspHeaders.Core/
n4pw01f 36 minutes ago Nice work! You gave me something to fix!! tumdum_ 19 minutes ago Sadly non of it was written by a human being.
It’s ridiculous that the answer to a secure web is for everyone to sprinkle the magic salt and not something on the browser side
we'd need an epoch like reset to good defaults
And if any of the websites use .NET, they can get almost all of the recommended security headers in one line by using a NuGet package I created: https://gaprogman.github.io/OwaspHeaders.Core/
Nice work! You gave me something to fix!!
Sadly non of it was written by a human being.