"Firefox extension that helps you generate a proper Content Security Policy (CSP) header for your website. Simply start recording, browse your site, and enjoy the CSP header that it produces." (ib., 2019-09-06)
"The goal of this document is to help operational teams with creating secure web applications. All Mozilla sites and deployments are expected to follow the recommendations below. Use of these recommendations by the public is strongly encouraged. The Enterprise Information Security (Infosec) team maintains this document as a reference guide." (ib., 2019-08-24)
"Memorable site for testing clients against bad SSL configs."
Cf. https://github.com/chromium/badssl.com
"Javascript app that provides secure file encryption using the AES-256-GCM algorithm from WebCryptoAPI provided by your browser. it was coded following the WebCrypto Documentations. It's fast, secure and Serverless, the app never uploads the files to the server." (ib., 2019-08-18) Cf. https://hat.sh
p. 2019-08-04; "Government whistleblowers are increasingly being charged under laws such as the Espionage Act, but they aren’t spies." (ib., 2019-08-14)
"An extension for Mozilla Thunderbird that configures it to make connections over the Tor network. TorBirdy automatically enhances the privacy settings of Thunderbird and configures it for use over Tor." (ib., 2019-08-13)
"The objective of the MANRS Observatory is to demonstrate the level of MANRS [Mutually Agreed Norms for Routing Security] readiness of all networks participating in the Internet routing, which also serves as an indication of the state of routing security." (ib., 2019-08-13)
"Secure crypto, secure passwords, secure messaging, secure e-mail, secure browsing—we see “secure something” everywhere, but no one defines this term. On closer inspection, “secure” even becomes a catchword most of the time. We discuss different examples in this article." (ib., 2019-07-18) Published: Sep 2, 2018 · Last update: Jun 4, 2019
Security depends on your threat model and your use cases, not on blanket statements of "experts". --- @infosec-handbook.eu, 2019-06-04, https://mastodon.at/users/infosechandbook/statuses/102214296427580511
"SUID program that reduces the risk of security breaches by restricting the running environment of untrusted applications using Linux namespaces and seccomp-bpf. It allows a process and all its descendants to have their own private view of the globally shared kernel resources, such as the network stack, process table, mount table." (ib., 2019-07-16)
Cf. https://wiki.archlinux.org/index.php/Firejail
... and WhatsApp and Instagram