2024.09.23 - My-Keys

AWS-PARIS AWS-DUBLIN S3NS

This update introduces the addition of HTTP Strict Transport Security (HSTS) and Content Security Policy (CSP) headers to the mobile application backend.

Security improvements

• HSTS: This header enforces secure connections to our site, ensuring that browsers only communicate over HTTPS. This helps protect against man-in-the-middle attacks and other vulnerabilities related to insecure connections.

• CSP: This header mitigates the risk of cross-site scripting (XSS) and other code injection attacks by specifying which sources of content are trusted. This reduces the potential for malicious content to be executed in users’ browsers.