diff --git a/static/features.html b/static/features.html index ea181abf..e70fd384 100644 --- a/static/features.html +++ b/static/features.html @@ -198,9 +198,10 @@ when sending mail including alert messages from the attestation service
  • SSHFP across all domains for pinning SSH keys
  • Static key pinning for our services in apps like Auditor
  • -
  • No cookies or similar client-side state for anything other than login sessions, - which are set up via SameSite=strict cookies and have server-side session tracking - with the ability to log out of other sessions
  • +
  • No persistent cookies or similar client-side state for anything other than + login sessions, which are set up via SameSite=strict cookies and have + server-side session tracking with the ability to log out of other + sessions
  • scrypt-based password hashing (likely Argon2 when the available implementations are more mature)