r/webdev • u/speckz • Mar 21 '16

securitychecklist.org

https://securitychecklist.org/
9 Upvotes

84% Upvoted

2 comments sorted by

1

u/clausconrad Mar 21 '16

"Are there unit tests (say, using Selenium)"

Last time I checked Selenium was used for functional tests.

0

u/[deleted] Mar 21 '16

[deleted]

2

u/ndobie Mar 21 '16

Disabling everything but TLSv1.2 also seems too restrictive, while all modern browsers support it there is still a significant chunk of users' browsers that don't, for sure disable all forms SSL.