From a1f672e7b93a77960b1d58d39a627827a974031c Mon Sep 17 00:00:00 2001 From: Daniel Micay Date: Mon, 29 Mar 2021 15:23:28 -0400 Subject: [PATCH] move unimportant OCSP stapling feature --- static/features.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/static/features.html b/static/features.html index 0e8afb1e..8c9a6617 100644 --- a/static/features.html +++ b/static/features.html @@ -212,7 +212,6 @@
  • Authenticated encryption for all of our services
  • Strong cipher configurations for all of our services (SSH, TLS, etc.) with only modern AEAD ciphers providing forward secrecy
    • -
  • Our web services use robust OCSP stapling with Must-Staple
  • Our web sites do not include any third party content and entirely forbid it via strict Content Security Policy rules
  • Our web sites disable referrer headers to maximize privacy
    • @@ -229,6 +228,7 @@ when sending mail including alert messages from the attestation service
  • SSHFP across all domains for pinning SSH keys
  • Static key pinning for our services in apps like Auditor
    • +
  • Our web services use robust OCSP stapling with Must-Staple
  • No persistent cookies or similar client-side state for anything other than login sessions, which are set up via SameSite=strict cookies and have server-side session tracking with the ability to log out of other