search

danwent / Perspectives-Server

network notary implementation for the Perspectives project
http://perspectives-project.org
GNU General Public License v3.0
50 stars 13 forks source link

Implement secure browsing settings #21

Open daveschaefer opened 11 years ago

daveschaefer commented 11 years ago

Dan Callahan has a good presentation on basic webserver security settings here: http://pyvideo.org/video/2315/quick-wins-for-better-website-security

We should enable the applicable ones for notary servers. This means:

Render:

  1. Enable XSS Protection
  2. Set the Content Security Policy
  3. Set XFrame options

Adding SSL is covered in #19. Once SSL is enabled we can also add Strict Transport Security.

netsafe commented 9 years ago

done it im my NGinx config