Conversation

New Internet.nl version available with: 1. latest TLS guidelines from

2. Extended CSP test 3. Better support for non-mail domains 4. Extension of minimum cache period for HSTS en.internet.nl/article/new-re Happy testing! #moderninternet

Screenshot of 100% score on Internet.nl
#IPv6 #DNSSEC #HTTPS

read image description

ALT

Replying to

and

> 3. Better support for non-mail domains This is nice. Helpful for convincing people to prevent spoofing emails from non-mail domains.

Replying to

and

Suggestion: encourage sites to defend against Spectre and other client-side vulnerabilities via cross-origin isolation: Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Nice posts about it at web.dev/coop-coep/ and web.dev/cross-origin-i.

web.dev

A guide to enable cross-origin isolation

Cross-origin isolation enables a web page to use powerful features such as SharedArrayBuffer. This article explains how to enable cross-origin isolation on your website.

10:24 AM · Mar 19, 2021Twitter Web App

Replying to

and

Thanks for the hint! We will look into that in more detail and see if we can add a test for it to Internet.nl.