Home Page Icon
Home Page
Table of Contents for
Cover
Close
Cover
by Adam D. Scott
Building Web Apps that Respect a User's Privacy and Security
Preface
What Are Ethics?
Professional Ethics
Intended Audience
1. Introduction
Our Responsibility
2. Respecting User Privacy
How Users Are Tracked
What Does Your Browser Know About You?
Do Not Track
Detecting Do Not Track
Respecting Do Not Track
Sites that Respect Do Not Track
Web Analytics
De-identification
User Consent and Awareness
Creating a Do Not Track Policy
Further Reading
3. Encrypting User Connections with HTTPS
How HTTPS Works
How the TLS Connection Works
Why Use HTTPS
User Privacy and Security
Site Authenticity
Browsers Deprecating HTTP
Improved Search Rankings
Implementing HTTPS
Let’s Encrypt
Other Certificate Options
Other Considerations
Redirect HTTP to HTTPS
HTTP Strict Transport Security
Mixed Content and Relative URLs
Secure Cookies
Conclusion
Further Reading
4. Securing User Data
Building on a Strong Foundation
OWASP Top 10
Secure User Authentication
Creating Our Own Login System
OAuth 2.0
Password Strength
Multifactor Authentication
Other Types of Authentication
Encrypting User Data
Sanitizing and Validating User Input
Cross-Site Request Forgery Attacks
Security Headers
Content-Security-Policy (CSP)
X-Frame-Options
X-XSS-Protection
X-Content-Type-Options
Checking Security Headers
Security Disclosures and Bug Bounty Programs
Conclusion
Further Reading
5. Preserving User Data
Data Ownership
Deleting User Data
Archiving and Graceful Shutdown
Further Reading
6. Conclusion
Search in book...
Toggle Font Controls
Playlists
Add To
Create new playlist
Name your new playlist
Playlist description (optional)
Cancel
Create playlist
Sign In
Email address
Password
Forgot Password?
Create account
Login
or
Continue with Facebook
Continue with Google
Sign Up
Full Name
Email address
Confirm Email Address
Password
Login
Create account
or
Continue with Facebook
Continue with Google
Next
Next Chapter
O’Reilly Web Platform
Add Highlight
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click
here
login for view all page.
Day Mode
Cloud Mode
Night Mode
Reset