A user account is required in order to edit this wiki, but we've had to disable public user registrations due to spam.
To request an account, ask an autoconfirmed user on Chat (such as one of these permanent autoconfirmed members).
TLS: Difference between revisions
Jump to navigation
Jump to search
(→TLS: Reduced problems with proxy traversal) |
No edit summary |
||
| Line 5: | Line 5: | ||
* Increased confidentiality (not perfect; domain is leaked, traffic analysis can still tell a great deal) | * Increased confidentiality (not perfect; domain is leaked, traffic analysis can still tell a great deal) | ||
* Service workers | * Service workers | ||
* | * [http://www.infoq.com/articles/Web-Sockets-Proxy-Servers Reduced problems with proxy traversal] | ||
* https://www.tbray.org/ongoing/When/201x/2012/12/02/HTTPS | * [https://www.tbray.org/ongoing/When/201x/2012/12/02/HTTPS Tim Bray on why privacy should be on by default] | ||
* http://googleonlinesecurity.blogspot.co.uk/2014/08/https-as-ranking-signal_6.html | * [http://googleonlinesecurity.blogspot.co.uk/2014/08/https-as-ranking-signal_6.html HTTPS is a ranking signal for Google] | ||
* https://indiewebcamp.com/HTTPS#Why | * [https://indiewebcamp.com/HTTPS#Why Indie Web Camp on HTTPS] | ||
* https://konklone.com/post/switch-to-https-now-for-free | * [https://konklone.com/post/switch-to-https-now-for-free How to switch to HTTPS for free] | ||
== HSTS == | == HSTS == | ||
* https://annevankesteren.nl/2014/09/tls-hsts TL;DR without HSTS your TLS deployment is not worth much | * [https://annevankesteren.nl/2014/09/tls-hsts TLS: deploy HSTS] TL;DR without HSTS your TLS deployment is not worth much | ||
Revision as of 09:45, 24 September 2014
TLS
- Integrity of content (no tampering possible)
- Protection of end user credentials
- Increased confidentiality (not perfect; domain is leaked, traffic analysis can still tell a great deal)
- Service workers
- Reduced problems with proxy traversal
- Tim Bray on why privacy should be on by default
- HTTPS is a ranking signal for Google
- Indie Web Camp on HTTPS
- How to switch to HTTPS for free
HSTS
- TLS: deploy HSTS TL;DR without HSTS your TLS deployment is not worth much