SSL Certificates

HSTSHSTS

HSTS Usage Statistics · Download List of All Websites using HSTS

Forces browsers to only communicate with the site using HTTPS.

Web Servers

nginxnginx

nginx Usage Statistics · Download List of All Websites using nginx

nginx [engine x] is a HTTP server and mail proxy server written by Igor Sysoev.

Document Standards

IFrameIFrame

IFrame Usage Statistics

The page shows content with an iframe; an embedded frame that loads another webpage.

P3P PolicyP3P Policy

P3P Policy Usage Statistics

The Platform for Privacy Preferences Project (P3P) enables Websites to express their privacy practices in a standard format that can be retrieved automatically and interpreted easily by user agents. P3P user agents will allow users to be informed of site practices (in both machine- and human-readable formats) and to automate decision-making based on these practices when appropriate. Thus users need not read the privacy policies at every site they visit.

Strict Transport SecurityStrict Transport Security

Strict Transport Security Usage Statistics

The HTTP Strict-Transport-Security (HSTS) header instructs the browser to only use https.

X-Frame-OptionsX-Frame-Options

X-Frame-Options Usage Statistics

The X-Frame-Options HTTP response header can be used to indicate whether or not a browser should be allowed to render a page in a frame or iframe. Sites can use this to avoid clickjacking attacks, by ensuring that their content is not embedded into other sites.

Content Type OptionsContent Type Options

Content Type Options Usage Statistics

Used to disable MIME-sniffing for a particular HTTP response.

X-XSS-ProtectionX-XSS-Protection

X-XSS-Protection Usage Statistics

X-XSS-Protection is a HTTP header set by Internet Explorer 8+. This header lets domains toggle on and off the "XSS Filter" of IE8, which prevents some categories of XSS attacks.

Content Security PolicyContent Security Policy

Content Security Policy Usage Statistics

Content Security Policy is a computer security concept, to prevent cross-site scripting XSS attacks.