Back
Configurable Security Headers and Cyphers
Im looking for a way to increase the Strict-Transport-Security time from the default of 126 days to something higher. There are other security headers I would like to add as well.
TypeScript
• Content-Security-Policy
• X-Frame-Options
• X-XSS-Protection (or use Content-Security-Policy)
• Referrer-Policy
• Permissions-Policy
• X-Permitted-Cross-Domain-Policies
• Cache-Control
• Pragma (?)
I'm also curious if we can remove weak cyphers such as
TypeScript
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013) ECDH secp521r1 (eq. 15360 bits RSA) FS WEAK 128
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014) ECDH secp521r1 (eq. 15360 bits RSA) FS WEAK 256
TLS_RSA_WITH_AES_128_GCM_SHA256 (0x9c) WEAK 128
TLS_RSA_WITH_AES_256_GCM_SHA384 (0x9d) WEAK 256
TLS_RSA_WITH_AES_128_CBC_SHA (0x2f) WEAK 128
TLS_RSA_WITH_AES_256_CBC_SHA (0x35) WEAK
TL;DR
User wants to increase the Strict-Transport-Security time and add other security headers. They also want to remove weak ciphers.
/cc @Jake
