This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "SSL TLS Knowledge Center"
(→Resources) |
(→Resources) |
||
| Line 7: | Line 7: | ||
[http://lists.w3.org/Archives/Public/www-archive/2009Sep/att-0051/draft-hodges-strict-transport-sec-05.plain.html Strict Transport Security Spec] - Specification for STS which allows a website to instruct the browser to not send requests to the web server over non-TLS channels. | [http://lists.w3.org/Archives/Public/www-archive/2009Sep/att-0051/draft-hodges-strict-transport-sec-05.plain.html Strict Transport Security Spec] - Specification for STS which allows a website to instruct the browser to not send requests to the web server over non-TLS channels. | ||
| − | [http://hackademix.net/2009/09/23/strict-transport-security-in-noscript/ STS in No Script] - How to enable STS support within No Script plugin | + | [http://hackademix.net/2009/09/23/strict-transport-security-in-noscript/ STS in No Script] - [BlogPost] How to enable STS support within No Script plugin |
| + | [http://michael-coates.blogspot.com/2009/11/https-data-exposure-get-vs-post.html HTTPS Data Exposure] - [BlogPost] HTTPS data exposure comparison for GET and POST | ||
= Needed = | = Needed = | ||
Revision as of 18:14, 6 January 2010
Purpose
The SSL/TLS Knowledge Center serves as a central point to provide references to SSL/TLS.
Resources
Transport_Layer_Protection_Cheat_Sheet - OWASP SSL/TLS Cheat Sheet
Strict Transport Security Spec - Specification for STS which allows a website to instruct the browser to not send requests to the web server over non-TLS channels.
STS in No Script - [BlogPost] How to enable STS support within No Script plugin
HTTPS Data Exposure - [BlogPost] HTTPS data exposure comparison for GET and POST
Needed
Guides for configuring SSL/TLS cipher support in common web servers
References to current SSL/TLS RFC specs
More entries to the "Needed" list
Anything else that would be helpful related to SSL/TLS
