Alexandria Library

A curated collection of awesome articles

Here are some ressources related to Https, Hsts, Web security. Hoping you will find learning material, alternative tools or just some interesting stuff.

Home > Cryptocurrency, Cybersecurity, Tech... > Cybersecurity, Web Development, Net... > HTTP, Security, Protocols, Websocke... > Https, Hsts, Web security

Articles

RIP HTTP

See discussion (123 comments, 184 points) - Archive

URLs: It's Complicated

See discussion (36 comments, 165 points) - Archive

Chrome’s address bar will use https:// by default

See discussion (444 comments, 659 points) - Archive

The modern HTTPS world has no place for old web servers

See discussion (450 comments, 339 points) - Archive

Still Why No HTTPS?

See discussion (336 comments, 224 points) - Archive

Java's URL.equals() Performs DNS Resolution

See discussion (133 comments, 186 points) - Archive

Does “www.” Mean Better Transport Layer Security?

See discussion (62 comments, 121 points) - Archive

What happens behind the scenes when we type www.google.com in a browser? (2015)

See discussion (76 comments, 259 points) - Archive

Evolving Chrome's security indicators

See discussion (78 comments, 101 points) - Archive

Protecting Against HSTS Abuse

See discussion (39 comments, 191 points) - Archive

Understanding the Limitations of HTTPS

See discussion (11 comments, 98 points) - Archive

Chrome 68 will mark all HTTP sites as “not secure”

See discussion (812 comments, 806 points) - Archive

Broadening HSTS to secure more of the Web

See discussion (42 comments, 86 points) - Archive

HTTPS on Stack Overflow: The End of a Long Road

See discussion (174 comments, 574 points) - Archive

HTTPS adoption has reached the tipping point

See discussion (83 comments, 131 points) - Archive

Chrome 56 will mark HTTP pages with password fields as non-secure

See discussion (398 comments, 947 points) - Archive

HTTPS on NYTimes.com

See discussion (159 comments, 251 points) - Archive

Why HTTPS for Everything?

See discussion (223 comments, 224 points) - Archive

The Guardian has moved to HTTPS

See discussion (60 comments, 103 points) - Archive

Here’s to more HTTPS on the web

See discussion (106 comments, 128 points) - Archive

Moving Towards a More Secure Web

See discussion (88 comments, 125 points) - Archive

TLS Everywhere, not https: URIs (2015)

See discussion (91 comments, 207 points) - Archive

Bringing HSTS to www.google.com

See discussion (73 comments, 112 points) - Archive

HTTPS Adoption doubled this year

See discussion (39 comments, 139 points) - Archive

Where did all the HTTP referrers go? (2013)

See discussion (36 comments, 97 points) - Archive

Why isn't HTTPS everywhere yet?

See discussion (123 comments, 118 points) - Archive

Handling App Transport Security in iOS 9

See discussion (59 comments, 123 points) - Archive

Securing access to Wikimedia sites with HTTPS by default

See discussion (47 comments, 160 points) - Archive

Deprecating Non-Secure HTTP

See discussion (304 comments, 340 points) - Archive

Netflix HTTPS performance experiments for large scale content distribution

See discussion (31 comments, 133 points) - Archive

The lack of HTTPS at Amazon: identifying items purchased via information leakage

See discussion (35 comments, 128 points) - Archive

Intent to deprecate: Insecure HTTP

See discussion (293 comments, 180 points) - Archive

Plain web text offenders: sending my location over HTTP when HTTPS was possible

See discussion (34 comments, 92 points) - Archive

Presidential candidate website tech, compared

See discussion (53 comments, 95 points) - Archive

Opportunistic Encryption for Firefox

See discussion (82 comments, 109 points) - Archive

The HTTPS-Only Standard

See discussion (94 comments, 189 points) - Archive

Marking HTTP as Non-Secure

See discussion (231 comments, 399 points) - Archive

HTTP vs. HTTPS

See discussion (38 comments, 113 points) - Archive

Why we use HTTPS for every .gov website we make

See discussion (82 comments, 233 points) - Archive

HTTPS as a ranking signal

See discussion (206 comments, 197 points) - Archive

HSTS for new TLDs

See discussion (42 comments, 85 points) - Archive

If You Can Read This, You're SNIing

See discussion (57 comments, 129 points) - Archive

What does "HREF" stand for? (2008)

See discussion (49 comments, 219 points) - Archive

Where did all the HTTP referrers go?

See discussion (77 comments, 110 points) - Archive

Django security releases issued

See discussion (17 comments, 95 points) - Archive

HTTPS is more secure, so why isn't the Web using it?

See discussion (82 comments, 84 points) - Archive

EFF: How to Deploy HTTPS Correctly

See discussion (43 comments, 167 points) - Archive

So, What Does "HREF" Stand For, Anyway?

See discussion (70 comments, 159 points) - Archive

EFF's HTTPS Everywhere Firefox plugin

See discussion (17 comments, 82 points) - Archive

Http-https transitions and relative URLs

See discussion (14 comments, 82 points) - Archive

API Shouldn't Redirect HTTP to HTTPS

See discussion (303 comments, 670 points) - Archive