Updating a .netcore Website’s Security Headers

GaProgMan tweeted recently about his A+ rating on securityHeaders.com. Checking my site, I could see there was room for improvement!

The original tweet:

I checked kritner.com and didn’t do so well. Let’s see about changing that!

Website security — We did the whole A+ on ssllabs thing:

Going from an “A” to an “A+” on ssllabs.com

But what about having a secure site from the headers point of view? Let’s get going!

What are security headers, and what problem do they solve?

Owasp is a great resource when it comes to helping keep your application secure:

OWASP Secure Headers Project - OWASP