5 ms·
First of all, thanks for sharing, I didn't know about many of these headers! From recent scans I see that www.google.com got an E with missing headers: St
by annnnd 11y ago
First of all, thanks for sharing, I didn't know about many of these headers!
From recent scans I see that www.google.com got an E with missing headers:
Strict-Transport-Security
Content-Security-Policy
Public-Key-Pins
X-Content-Type-Options
Is this negligence on Google's part or ...?
- sarciszewski 11y agohttps://securityheaders.io/?q=https%3A%2F%2Faccounts.google.com%2FServiceLogin%3Fservice%3Dmail%26passive%3Dtrue%26rm%3Dfalse%26continue%3Dhttps%3A%2F%2Fmail.google.com%2Fmail%2F%26ss%3D1%26scc%3D1%26ltmpl%3Ddefault%26ltmplcache%3D2%26emr%3D1%26osid%3D1 https://securityheaders.io/?q=https%3A%2F%2Faccounts.google.... Looks like they just need a Content-Security-Policy and Public-Key-Pins.