Skip to content
Dan Milne edited this page Mar 24, 2016 · 7 revisions

#Welcome to the opto wiki!

HTML Checks

Referrer Policy not set

When following a link, the browser may populate a referer header which the receiving website can use to track where clicks come from. Sites can specify a browser includes no referrer, a full URL along with several other options. Read more here.

App Links

Websites can display links to iOS apps. Check iTunes documentation for more info.

SSL Checks

QualSys provide an excellent suite of SSL tests. Mozilla have a guide and a configuration generator for best practice setup.

Check Protocols ( Via NPN & ALPN )

HTTPS servers may advertise various protocols via NPN ( Next Protocol Negotiation ) or the more recent ALPN (Application Layer Protocol Negotiation). This checks for server support of HTTP2, Speedy and HTTP1.1.

Currently this code only works with NPN.

Check HSTS

Checks for the HTTP Strict Transport Security HTTP headers.

Check HTTPS Redirect

Checks for redirection from HTTP -> HTTPS.

Check Certificate Expiry

Check SSL Certificates have at least 30 days of validity.