Security

Content-Security-Policy

Content-Security-Policy

This is the third article in the series of hardening this webserver. If you have not read them, please read: Protecting my Webserver and SSL Cypher hardening. In this article, I show the usage of the Content-Security-Policy header. This header helps you reduce XSS risks on modern browsers by declaring what dynamic resources are allowed to load via an HTTP Header.

Read More
SSL Cypher hardening

SSL Cypher hardening

I the previous post I described simple actions that you can take to harden your web server. It showed you headers that you can alter without too much interference on the functioning.

Read More
Protecting my web server

Protecting my web server

Just recently I finished an article for the Dutch Java magazine about securing your website by means of https connections. In the article, we (Ivo Woltring and I) describe details on how to get a certificate for your Webserver from the LetsEncrypt CA.

Read More