Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Expect-CT is not implemented #19

Closed
GaProgMan opened this issue Mar 21, 2018 · 0 comments
Closed

Expect-CT is not implemented #19

GaProgMan opened this issue Mar 21, 2018 · 0 comments
Assignees
@GaProgMan
Labels
enhancement

Comments

@GaProgMan
Copy link
Owner

Description

The OwaspHeaders.Core middleware does not yet include support for Expect-CT which is a header related to Certificate Transparency.

Description from MDN:

The Expect-CT header allows sites to opt in to reporting and/or enforcement of Certificate Transparency requirements, which prevents the use of misissued certificates for that site from going unnoticed. When a site enables the Expect-CT header, they are requesting that the browser check that any certificate for that site appears in public CT logs.

Source: Excpect-CT on MDN
@GaProgMan GaProgMan self-assigned this Mar 21, 2018
GaProgMan added a commit that referenced this issue Apr 16, 2018
@GaProgMan
Merge pull request #27 from GaProgMan/expect-ct
5b0a44f 
Fixed #19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@GaProgMan GaProgMan

Labels
enhancement
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@GaProgMan