joshua/dash-docs
1
0
Fork 0
mirror of https://github.com/seigler/dash-docs synced 2025-07-27 09:46:12 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Make HSTS preloading optional

Browse source
This commit is contained in:
James Hilliard 2016-12-16 02:44:32 -06:00
parent ffaf884570
commit 8d91bb76a9
1 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
README.md
View file

@ -719,7 +719,7 @@ Basic requirements:
- No concerning bug is found when testing the wallet - No concerning bug is found when testing the wallet
- Website supports HTTPS and 301 redirects HTTP requests - Website supports HTTPS and 301 redirects HTTP requests
- SSL certificate passes [Qualys SSL Labs SSL test](https://www.ssllabs.com/ssltest/) - SSL certificate passes [Qualys SSL Labs SSL test](https://www.ssllabs.com/ssltest/)
- Website serving executable code or requiring authentication uses HSTS with a max-age of at least 180 days and is included in the [HSTS preload list](https://hstspreload.appspot.com/) - Website serving executable code or requiring authentication uses HSTS with a max-age of at least 180 days
- The identity of CEOs and/or developers is public - The identity of CEOs and/or developers is public
- Avoid address reuse by using a new change address for each transaction - Avoid address reuse by using a new change address for each transaction
- If private keys or encryption keys are stored online: - If private keys or encryption keys are stored online:
@ -751,6 +751,7 @@ Optional criteria (some could become requirements):
- Does not show "received from" Bitcoin addresses in the UI - Does not show "received from" Bitcoin addresses in the UI
- Uses deterministic ECDSA nonces (RFC 6979) - Uses deterministic ECDSA nonces (RFC 6979)
- Provides a bug reporting policy on the website - Provides a bug reporting policy on the website
- Website serving executable code or requiring authentication is included in the [HSTS preload list](https://hstspreload.appspot.com/)
- If user has no access over its private keys: - If user has no access over its private keys:
- Full reserve audit(s) - Full reserve audit(s)
- Insurance(s) against failures on their side - Insurance(s) against failures on their side