LinusTechTips Site Security

[MasterChromatica]

https://observatory.mozilla.org/analyze.html?host=linustechtips.com

here is the data.

The stats are not that good, Whats up with that @LinusTech?

[njmyers3]

According to the same site, Google is even less secure, so I wouldn't worry about it

[Arty]

more so you should tag @colonel_mortis

[kirashi]

44 minutes ago, StepinCurry said:

https://observatory.mozilla.org/analyze.html?host=linustechtips.com

here is the data.

The stats are not that good, Whats up with that @LinusTech?

I find the TLS Summary tab more amusing:

This is because a certain number of CloudFlare sites share the same SSL certificate due to the way CF works. Still funny though.

[AlwaysFSX]

DDoS problems and spam bots haven't happened lately but it used to be fairly common, that might've effected the rank.

[yathis]

Who would want to hurt cutie Linus?

 

PS I hope he gets an eyebrow piercing

[colonel_mortis]

The things that it marked for improvement are things that we can't realistically change:

We can't implement a useful content security policy because the editor relies on embedding javascript in HTML, which can only be permitted by a very broad (useless) policy.

Subresource integrity is unnecessary because all the scripts that we use that we have any control over versioning of are hosted by us.

X-XSS-Protection is disabled by the forum software to avoid issues.

 

In an ideal world, all security features would be enabled, but considerable work has already gone into protecting against the attacks that they protect against, so the chance of them being useful is fairly small (especially SRI).

[yathis]

What about LTX security?