SSL Certificates

HSTSHSTS

HSTS Usage Statistics · Download List of All Websites using HSTS

Forces browsers to only communicate with the site using HTTPS.

Document Standards

CORSCORS

CORS Usage Statistics

The Cross-Origin Resource Sharing (CORS) mechanism gives web servers cross-domain access controls, which enable secure cross-domain data transfers. Access Control Allow Origin.

Strict Transport SecurityStrict Transport Security

Strict Transport Security Usage Statistics

The HTTP Strict-Transport-Security (HSTS) header instructs the browser to only use https.

Content Type OptionsContent Type Options

Content Type Options Usage Statistics

Used to disable MIME-sniffing for a particular HTTP response.

X-Frame-OptionsX-Frame-Options

X-Frame-Options Usage Statistics

The X-Frame-Options HTTP response header can be used to indicate whether or not a browser should be allowed to render a page in a frame or iframe. Sites can use this to avoid clickjacking attacks, by ensuring that their content is not embedded into other sites.

X-XSS-ProtectionX-XSS-Protection

X-XSS-Protection Usage Statistics

X-XSS-Protection is a HTTP header set by Internet Explorer 8+. This header lets domains toggle on and off the "XSS Filter" of IE8, which prevents some categories of XSS attacks.