Nothing here yet.
Nothing here yet.
3d ago · 3 min read · Part 5 of the series "EU Web Security: 10 Steps to a Better Rating" Why security.txt A security researcher finds a vulnerability on your website. Who do they contact? Without security.txt: They search your site, find info@, send an email. It lands w...
Join discussionMay 4 · 4 min read · Part 4 of the series "EU Web Security: 10 Steps to a Better Rating" The Invisible Foundation Before your browser can load a website, it must resolve the domain name to an IP address. That is what the Domain Name System (DNS) does — and it has a fund...
Join discussionApr 27 · 3 min read · Part 3 of the series "EU Web Security: 10 Steps to a Better Rating" Why CSP Matters Cross-Site Scripting (XSS) has been the most common web application vulnerability for over 20 years. An attacker injects JavaScript into your website — via a form, a...
Join discussionApr 20 · 4 min read · Part 2 of the series "EU Web Security: 10 Steps to a Better Rating" The Problem Someone sends an email from ceo@your-domain.com to your customer. The email contains a payment request. It did not come from you. Without DMARC: The receiving mail serve...
Join discussionApr 15 · 4 min read · Part 1 of the series "EU Web Security: 10 Steps to a Better Rating" The Problem in 30 Seconds Your website has a TLS certificate. Good. But when a user types http://your-domain.com — what happens? Without HSTS: The browser connects unencrypted. The ...
Join discussion