Tag: webdev | Int64 Software Blog

Creating a Self-Signed SSL Certificate for your Intranet Services

A guide on how to create a self-signed SSL/TLS certificate for encrypting client connections to intranet services (such as OVERLAPS).

Hardening Website Security – Part 4: Safely Handling User Input

In the final part of this series, we’re going to look at the proper way to handle raw user input from your website, and what can go wrong if it isn’t properly sanitized before storing or using the data.

Hardening Website Security – Part 2: User Session Cookie Security

In this section we will be looking at how you can increase the security of user sessions on your web server, and reduce the risk of Session Hijack Attacks.

Hardening Website Security – Part 1a: HSTS Preloading

HSTS Preloading to Idenfity HTTPS Secured Websites

In part 1 of this series of articles we described the HSTS header “Strict-Transport-Security”. This header is used to tell the clients web browser that HTTP Strict Transport Security mode should be enabled so that the browser should remember that this website only uses HTTPS and should not accept any unencrypted traffic.