Unterschiede

Hier werden die Unterschiede zwischen zwei Versionen angezeigt.

--- centos:web_c7:apache_2 [29.11.2016 20:14. ] – [HPKP] django
+++ centos:web_c7:apache_2 [30.11.2016 08:53. ] – [Tests] django
@@ Zeile 2568: / Zeile 2568: @@
 ==== Secure Cookie mit HttpOnly ====
+In der vHost-Definition unseres Apache-vHOST ergänzen wir folgende Zeile ''Header edit Set-Cookie ^(.*)$ $1;HttpOnly;Secure
+''.
+   # vim /etc/httpd/conf.d/forum.conf
+<code bash>...
+# Add Secure and HTTP only attributes to cookies
+Header edit Set-Cookie ^(.*)$ $1;HttpOnly;Secure
+...</code>
+https://tools.geekflare.com/web-tools/http-header-analyzer
+| set-cookie:   | Forum=rtg65np1t1cvnrg7n30l8mad67; path=/; secure; \\ HttpOnly;HttpOnly;SecureDW7fa065a06cb74b536c124cfbe56ac6d3=deleted; \\ expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; secure; httponly;HttpOnly;Secure |
+**HttpOnly** und **Secure** kennzeichnen die erfolgreiche Änderung!
-    # Add Secure and HTTP only attributes to cookies
-    Header edit Set-Cookie ^(.*)$ $1;HttpOnly;Secure
 ==== HPKP ====
@@ Zeile 2594: / Zeile 2614: @@
 [[https://observatory.mozilla.org/|Observatory by Mozilla]] \\
 [[https://www.ssllabs.com|Qualys SSl Labs SSL Server Test]] \\
+[[https://securityheaders.io|SecurityHeaders.io by Scott Helme]] \\