@ttttposting.bsky.social
@ttttposting.bsky.social@ttttposting.bsky.social
@hugovalters.bsky.socialTomcat ships HttpHeaderSecurityFilter but doesn't enable it. Add one global filter in conf/web.xml to get HSTS, X-Frame-Options, X-Content-Type-Options, and CSP.
https://www.valtersit.com/vault/enforce-http-strict-transport-security-and-security-headers--2bf663/
#apache #tomcat #hsts
@donwebmedia.bsky.socialHSTS en WordPress 2026: activalo sin romper tu sitio
¿Tu WordPress tiene candado pero sigue vulnerable a downgrade attacks? Activá HSTS WordPress en 4 pasos y cerrá el hueco que el HTTPS solo no tapa
@hugovalters.bsky.socialAdd HSTS + CSP at the edge with CloudFront Response Headers Policies. No Nginx/Apache edits, no app changes. Full AWS CLI walkthrough: https://www.valtersit.com/vault/deploy-cloudfront-security-response-headers-policy-for-hsts--5c0c3d/ #aws #cloudfront #hsts
@mustafaerbay.bsky.socialThought I was safe sending preload headers," "H
#Hsts #Https #Nginx #Cloudflare
https://mustafaerbay.com.tr/en/blog/technology/hsts-preload-basliga-yazmak-listeye-girmek-degil/
@mustafaerbay.bsky.socialMayıs'tan beri savaşı sürdürüyorum: domainım preload gönderiyor ama listede yok. .app düşmanı listede, biz ise yine de savaşıyız. HSTS'nin iki hafızası, savaşı…
#Hsts #Https #Nginx #Cloudflare
https://mustafaerbay.com.tr/blog/technology/hsts-preload-basliga-yazmak-listeye-girmek-degil/