Webperf-se / webperf_core

webperf-core is an open-source testing suite tailored to help you improve your digital presence in areas like web performance, security and accessibility to email best practice using many small improvements.

https://webperf.se/articles/webperf-core/

MIT License

17 stars 25 forks source link

Test Improvement - HTTP & Network - Extended #139

Open 7h3Rabbit opened 1 year ago

7h3Rabbit commented 1 year ago

Suggested Improvements:

Check HTTP Method support/use
Validate CAA – Certification Authority Authorization
Validate that same website over IPv6 and IPv4
Validate Ciphers support & cipher order

In progress:

Validate use of DNSSEC ( https://www.cloudflare.com/dns/dnssec/how-dnssec-works/ )

7h3Rabbit commented 4 months ago

we should add timeout according to request in #121

cockroacher commented 2 months ago

We should check if X-Frame-Options is used and

adjust rating for setting 'frame-ancestors' directive to 'none' is similar to X-Frame-Options: deny (which is also supported in older browsers).

CSP Improvements

Validate correct CSP hash format ( <hash-algorithm>-<base64-value>)
We should check CSP nonce length as it should not be guessable.

TLS Improvements

Check cipher security
re add support for identify wrong certificate