LXer: Only 0.1% of you are doing web server security right
 

Published at LXer:

Venerable net-scan outfit Netcraft has issued what clich? would describe as "a stinging rebuke" to sysadmins the world over, for ignoring HTTP Public Key Pinning (HPKP). Pinning is designed to defend users against impersonation attacks, in which an attacker tricks a certificate authority to issue a fraudulent certificate for a site.

Read More...