Security planning

Threat modeling sounds like something a large company does with a security department and a binder. It is not. At its core it is a short, structured conversation about how your app could be misused and what you will do…

Security headers are short lines your server adds to every response, telling the browser how to treat your pages: only over HTTPS, not inside someone else's frame, without guessing file types. They are cheap to add and…