summaryrefslogtreecommitdiff
path: root/content/entry/oxen-security-fail.md
diff options
context:
space:
mode:
Diffstat (limited to 'content/entry/oxen-security-fail.md')
-rw-r--r--content/entry/oxen-security-fail.md1
1 files changed, 1 insertions, 0 deletions
diff --git a/content/entry/oxen-security-fail.md b/content/entry/oxen-security-fail.md
index 5ca19fa..60146c4 100644
--- a/content/entry/oxen-security-fail.md
+++ b/content/entry/oxen-security-fail.md
@@ -2,6 +2,7 @@
title: "Oxen Security Fail"
date: 2021-09-28T00:00:00
draft: false
+makerefs: false
---
Lately I've been doing research on the Oxen Privacy Tech Foundation and their various projects. On 19 September while looking at Session, I noticed getsession.org was missing the Strict-Transport-Security header[1]. So I decided to also check the security headers for oxen.io[2], lokinet.org[3], and optf.ngo[4] and what do you know, they're also missing HTTP security headers.