Categorise Badges? - Githubissues

snift / snift-api

🏗 Backend REST API for Snift to sniff security vulnerabilities from the web.

MIT License

2 stars 0 forks source link

Categorise Badges? #38

Closed shrirambalaji closed 4 years ago

shrirambalaji commented 4 years ago

Currently the Badges are sent without a category indicating what type of security badge it is.

I'd like to categorise them to be shown better in the UI ( in some way, not sure how that'd be, but could be category score which when sorta summed up leads to the actual score. Thinking the UI would be Similar to what lighthouse does for websites.

Following is the categorization I have in mind:

Network Protection

HTTP_SECURE
HTTPS_ONLY
LATEST_HTTP
LATEST_TLS

Content Security

CSP_ENABLED
XSS_PROTECT
CLICKJACKING_PROTECT

User Privacy

NO_SNIFF
ENSURE_PRIVACY

Eavesdropping and Spoofing Protection

PUBLIC_KEY_PINNING_ENABLED
EMAIL_SPOOFING_PROTECT

@maruthi-adithya let me know your thoughts.

maruthi-adithya commented 4 years ago

Good idea. We can do this.