http-security

http-security copied to clipboard

Make a better gauntlet list

1

We need a list of Alexa 100, who support `https://`. Many domains in the Alexa 100 only support `http://`.

postmodern

We also need to parse the `Set-Cookie` header to check for insecure cookies.

postmodern

Add support for the [Public-Key-Pins header](https://tools.ietf.org/html/draft-ietf-websec-key-pinning-21).

postmodern

dguido