SSL Certificates

HSTSHSTS

HSTS Usage Statistics · Download List of All Websites using HSTS

Forces browsers to only communicate with the site using HTTPS.

HSTS IncludeSubdomains PreLoadHSTS IncludeSubdomains PreLoad

HSTS IncludeSubdomains PreLoad Usage Statistics · Download List of All Websites using HSTS IncludeSubdomains PreLoad

This website includes instructions for HSTS loading that would allow it to be submitted to the HSTS preload list.

Document Encoding

UTF-8UTF-8

UTF-8 Usage Statistics

UTF-8 (8-bit UCS/Unicode Transformation Format) is a variable-length character encoding for Unicode. It is the preferred encoding for web pages.

Document Standards

HTML5 DocTypeHTML5 DocType

HTML5 DocType Usage Statistics

The DOCTYPE is a required preamble for HTML5 websites.

JavascriptJavascript

Javascript Usage Statistics

JavaScript is a scripting language most often used for client-side web development.

Cross Origin Opener PolicyCross Origin Opener Policy

Cross Origin Opener Policy Usage Statistics

COOP allows you to ensure a top-level document does not share a browsing context group with cross-origin documents.

Cross Origin Resource SharingCross Origin Resource Sharing

Cross Origin Resource Sharing Usage Statistics

CORP Allows a server to indicate any other origins (domain, scheme, or port) than its own from which a browser should permit loading of resources.

Referrer PolicyReferrer Policy

Referrer Policy Usage Statistics

Requests made from a document, and for navigations away from that document are associated with a Referrer header. This policy determines in the browser should send a referrer or not.

Content Type OptionsContent Type Options

Content Type Options Usage Statistics

Used to disable MIME-sniffing for a particular HTTP response.

DNS PrefetchDNS Prefetch

DNS Prefetch Usage Statistics

Page contains links to disable or enable DNS prefetching of links in the page.

X-Frame-OptionsX-Frame-Options

X-Frame-Options Usage Statistics

The X-Frame-Options HTTP response header can be used to indicate whether or not a browser should be allowed to render a page in a frame or iframe. Sites can use this to avoid clickjacking attacks, by ensuring that their content is not embedded into other sites.

X-XSS-ProtectionX-XSS-Protection

X-XSS-Protection Usage Statistics

X-XSS-Protection is a HTTP header set by Internet Explorer 8+. This header lets domains toggle on and off the "XSS Filter" of IE8, which prevents some categories of XSS attacks.

Strict Transport SecurityStrict Transport Security

Strict Transport Security Usage Statistics

The HTTP Strict-Transport-Security (HSTS) header instructs the browser to only use https.