Advanced SSL options / HTTP headers
Hello!
Is it possible to customize virtualhost configuration files (similar to Apache for example) in order to insert additional HTTP headers like:
- HSTS and preloading options
- HPKP - public key pinning options to avoid SSL man-in-the-middle
- SSL compression
- SSL stapling
This is a real must imo.. this makes using Axigen a lot safer!
Robin Koper
shared this idea
In Axigen X3, the following policies will be in-place for WebMail:
- Content-Security-Policy
- X-XSS-Protection
- X-Content-Type-Options
- Strict-Transport-Security (HSTS).
HPKP is deprecated by Chrome — we’ve decided not to support it for now.
Regarding the individual configurations “per virtual host”, we will not support this for now.
I will mark this issue as complete and if there are further needs on the topic, I will kindly ask you to open new suggestions.
-
Postak @ Etnetera
commented
Hi,
please, implement the same policies (Content-Security-Policy, X-XSS-Protection, X-Content-Type-Options, Strict-Transport-Security) to WebADMIN interface.
Best regards,
Karel Ziegler -
Postak @ Etnetera
commented
And the other like Content-Security-Policy or X-Content-Type-Options...