Tagged Questions

0
votes
0answers
70 views

Client Side Negotiation

I have -MultiViews set and SSLInsecureNegotation off ( in ifmodule of mod_ssl.c) in Apache. But still vulnerability report says I am vulnerable to client side renegotiation and "This server is ...
8
votes
2answers
627 views

HSTS extra security over HTTPS

Is HSTS good to use even if my servers are configured to use HTTPS (Even if HTTP is used, the rewrite rules in apache makes it to HTTPS) Also does HSTS make even the resources like CSS, images to be ...