Questions tagged [cdn]
Security practices of as well as security implications of using a Content Delivery Network such as Cloudflare or Akamai.
4
questions with no upvoted or accepted answers
3
votes
0
answers
158
views
Risks of not enabling HSTS on a static content subdomain. Even though main domain does have hsts
I'm investigating an issue where our static content (js, css) is deployed in AWS Cloudfront under a subdomain of our main website and doesn't have HSTS enabled. The main domain does have HSTS enabled ...
- 513
2
votes
0
answers
152
views
How can an attacker hijack js/css content?
I just encounter an issue, the cached js files showed porn site
Here's the simple network diagram.
https://cdn.mysite.com/js/app.js shows a porn site, but if I add in query string
https://cdn....
- 121
0
votes
0
answers
95
views
Is this web cache poisoning attempt correct?
So i've been trying to learn cache poisoning for a while and today i thought i finally found a vulnerable instance. Everything seems to be working even tho it doesn't. Like, 416 response is cached, ...
- 1
0
votes
2
answers
142
views
DomainFronting - re-routing and SSL certificats
I'm looking for a specific answer regarding the TLS handshake in a scenario of domain-fronting.
Following hensonsecurity and zscaler blogs I have noticed that a detailed description regarding the re-...
