Tag Info

New answers tagged

1

A website is hosted in a web server, perhaps you meant that your web server is a Windows server but it sounds like you at home use MS Windows. Just to be clear, what you yourself use to browse to your website does not affect how others reach your website. Depending on the proxy they may or may not set the X-Forwarded-For header, which would give away that ...


0

You cannot generally secure a user's own machine against them. Browsers often offer tools that let users look at net traffic from the browser without needing to MITM themselves. You should accept that a mildly determined user will be able to see the traffic and go from there. The best approach is to examine why you're worried a user will view their own ...


4

Would HSTS be effective if the Proxy's CA is in the trusted store? The public key pinning built into Chrome and Firefox is ignored if the certificate is signed by a CA which was explicitly imported by the user (i.e. trusted but not built in). This is to support the common use case of legal SSL interception in security devices and software, i.e. to ...



Top 50 recent answers are included