diff --git a/static/features.html b/static/features.html index 07038922..d3722a70 100644 --- a/static/features.html +++ b/static/features.html @@ -187,7 +187,9 @@
  • Authenticated encryption for all of our services
  • Strong cipher configurations for all of our services (SSH, TLS, etc.) with only modern AEAD ciphers providing forward secrecy
  • -
  • DNSSEC for all our domains
  • +
  • Our web services uses OCSP stapling with Must-Staple
  • +
  • DNSSEC implemented for all of our domains, which is particularly important + for securing email due to it relying on DNS records
  • DANE TLSA records for pinning keys for all our TLS services (mostly helps to secure email due to lack of browser support)
  • SSHFP across all domains for pinning SSH keys