Record · corpus.blog/posts/01a08759-81f9-7300-b76c-2013aecc9bb5

Website Best Practices

brntn · published 15 August 2023

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at brntn.me Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 43
Words captured: 5,563

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://github.com/sesh/ready

github.com

https://ssl-config.mozilla.org/

ssl-config.mozilla.org

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie

developer.mozilla.org

Cookies, the GDPR, and the ePrivacy Directive Read at the source ↗

gdpr.eu

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security

developer.mozilla.org

https://letsencrypt.org

letsencrypt.org

https://hstspreload.org

hstspreload.org

https://screenshots.page/

screenshots.page

https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP

developer.mozilla.org

https://au.pcmag.com/security/95648/facebooks-in-app-browser-injects-javascript-into-third-party-websites

au.pcmag.com

https://csp-evaluator.withgoogle.com/

csp-evaluator.withgoogle.com

https://cheatsheetseries.owasp.org/cheatsheets/Content_Security_Policy_Cheat_Sheet.html

cheatsheetseries.owasp.org

https://github.com/w3c/webappsec-permissions-policy/blob/main/permissions-policy-explainer.md

github.com

https://github.com/w3c/webappsec-permissions-policy/blob/main/features.md

github.com

https://developer.chrome.com/docs/privacy-sandbox/floc/

developer.chrome.com

https://owasp.org/www-community/attacks/Clickjacking

owasp.org

https://caniuse.com/?search=frame-ancestors

caniuse.com

https://owasp.org/www-community/attacks/csrf

owasp.org

https://brntn.me

brntn.me

https://chromium.googlesource.com/chromium/src/+/master/services/network/cross_origin_read_blocking_explainer.md

chromium.googlesource.com

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection

developer.mozilla.org

https://html.spec.whatwg.org/multipage/semantics.html

html.spec.whatwg.org

https://github.com/h5bp/html5-boilerplate/blob/v8.0.0/dist/doc/html.md

github.com

https://developers.google.com/speed/pagespeed/insights/

developers.google.com

https://github.com/audreyfeldroy/favicon-cheat-sheet

github.com

https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity

developer.mozilla.org

https://developer.chrome.com/blog/http-cache-partitioning/

developer.chrome.com

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-DNS-Prefetch-Control

developer.mozilla.org

https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS

developer.mozilla.org

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Expect-CT

developer.mozilla.org

New helper added: SSL Server Test – Perform a deep analysis of the configuration of any SSL web server on the public Internet. Read at the source ↗

ssllabs.com

https://github.com/ssllabs/research/wiki/SSL-and-TLS-Deployment-Best-Practices

github.com

https://www.mnot.net/cache_docs/

mnot.net

https://www.gov.uk/guidance/set-up-government-email-services-securely

gov.uk

https://fastmail.blog/advanced/spf-dkim-dmarc/

fastmail.blog

https://www.gov.uk/guidance/protect-domains-that-dont-send-email

gov.uk

https://developers.google.com/search/docs/crawling-indexing/robots/intro

developers.google.com

https://securitytxt.org/

securitytxt.org

https://infosec.mozilla.org/guidelines/web_security

infosec.mozilla.org

https://github.com/sesh/ready/issues?q=author%3Aseirdy+created%3A%3C%3D2023-08-24

github.com

https://html.spec.whatwg.org/multipage/links.html

html.spec.whatwg.org

https://scotthelme.co.uk/coop-and-coep/

scotthelme.co.uk

Best practices for inclusive textual websites Read at the source ↗

seirdy.one