HTTPS: Difference between revisions

From Rixort Wiki
Jump to navigation Jump to search
(Created page with "== Ways to improve HTTPS connections == * DNS CAA records - these restrict which certificate authorities are valid for the domain.")
 
No edit summary
 
(2 intermediate revisions by the same user not shown)
Line 2: Line 2:


* DNS CAA records - these restrict which certificate authorities are valid for the domain.
* DNS CAA records - these restrict which certificate authorities are valid for the domain.
* Support TLSv1.3
* Do not support SSLv3 or lower
* Disable support for TLS 1.0 and TLS 1.1, but beware of incompatible clients
== Links ==
* [https://nullsweep.com/http-security-headers-a-complete-guide/ HTTP Security Headers - A Complete Guide]

Latest revision as of 17:33, 25 September 2019

Ways to improve HTTPS connections

  • DNS CAA records - these restrict which certificate authorities are valid for the domain.
  • Support TLSv1.3
  • Do not support SSLv3 or lower
  • Disable support for TLS 1.0 and TLS 1.1, but beware of incompatible clients

Links