summaryrefslogtreecommitdiff
path: root/content/entry/oxen-security-fail.md
diff options
context:
space:
mode:
Diffstat (limited to 'content/entry/oxen-security-fail.md')
-rw-r--r--content/entry/oxen-security-fail.md1
1 files changed, 1 insertions, 0 deletions
diff --git a/content/entry/oxen-security-fail.md b/content/entry/oxen-security-fail.md
index c2f7f27..9463d45 100644
--- a/content/entry/oxen-security-fail.md
+++ b/content/entry/oxen-security-fail.md
@@ -2,6 +2,7 @@
title: "Oxen Security Fail"
date: 2021-09-28T00:00:00
draft: false
+pageinfo: true
---
Lately I've been doing research on the Oxen Privacy Tech Foundation and their various projects. On 19 September while looking at Session, I noticed getsession.org was missing the Strict-Transport-Security header[1]. So I decided to also check the security headers for oxen.io[2], lokinet.org[3], and optf.ngo[4] and what do you know, they're also missing HTTP security headers.