You Set Up HTTPS. You Still Forgot These 5 HTTP Security Headers.

Getting a green padlock feels like the security box is checked. It isn't. HTTPS encrypts the connection, but it says nothing about clickjacking, script injection, or whether browsers will quietly down