Technology
HTTP security headers: which ones to set on any website and what each does
What HSTS, Content-Security-Policy, X-Content-Type-Options, X-Frame-Options, Referrer-Policy and Permissions-Policy do, with recommended values and checks.
Topic
Articles about HTTP
2 articles · HTTP: practical guides, examples and explanations written by Aimran.
Technology
What a JWT is, what is inside it and why decoding it is not validating it
Anatomy of a JSON Web Token (header, payload and signature), which claims it carries, how to read it, the common security mistakes and where to store it.