Embed Size (px)
Citation preview
Feature Chrome Edge FirefoxInternet
ExplorerOpera Safari Servo
Basic Support 1.0 (Yes) 51 8.0 13 No support (Yes)
Desktop
Mobile
Feature AndroidChrome for
AndroidEdge Mobile
Firefox for
AndroidIE Mobile Opera Mobile Safari Mobile
Basic Support (Yes) (Yes) (Yes) 51 (Yes) (Yes) No support
Domains 548567
"x-content-type-options" 64643
"x-frame-options" 71772
"x-xss-protection" 31404
HSTS 20113
HSTS (report only) 0
HPKP 365
HPKP (report only) 34
CSP 5833
0.00%
2.00%
4.00%
6.00%
8.00%
10.00%
12.00%
14.00%
0
10000
20000
30000
40000
50000
60000
70000
80000
"x-content-type-options" "x-frame-options" "x-xss-protection"
Security headers
Series1 Series2
0.00%
0.50%
1.00%
1.50%
2.00%
2.50%
3.00%
3.50%
4.00%
0
5000
10000
15000
20000
25000
HSTS HSTS (report only) HPKP HPKP (report only) CSP
New security headers
Series1 Series2
![The Cracked Cookie Jar: HTTP Cookie Hijacking and the ...€¦ · HSTS. The HTTP Strict Transport Security mecha-nism [12] allows websites to instruct browsers to only ini-tiate communication](https://img.pdfslide.net/doc/110x75/5f0fed8e7e708231d4469571/the-cracked-cookie-jar-http-cookie-hijacking-and-the-hsts-the-http-strict.jpg)
