HTTP Security Headers

Today, most websites use HTTPS with SSL/TLS certificates to protect the communication between the visitor's browser and the website. An additional layer of protection is provided by HTTP Security Headers.

HTTP Security Headers tell the browser which security and privacy rules should be applied when loading a website. They help protect against common cyber attacks such as cross-site scripting (XSS), clickjacking and content injection.

In this presentation, Peter explains the most important HTTP Security Headers, what they do and why they are important. He also shows how to configure and implement these HTTP Security Headers in a Joomla website to improve its security.