1. Alashwali, E.S., Szalachowski, P., Martin, A.: Exploring HTTPS security inconsistencies: a cross-regional perspective. Comput. Secur.97, 101975 (2020)

   Google Scholar 

2. Amann, J., Gasser, O., Scheitle, Q., Brent, L., Carle, G., Holz, R.: Mission accomplished? HTTPS security after diginotar. In: Proceedings of the 2017 Internet Measurement Conference, IMC 2017, New York, NY, USA, pp. 325–340. ACM, November 2017

   Google Scholar 

3. April King: Analysis of the Alexa Top 1M sites, April 2019.https://pokeinthe.io

4. Buchanan, W.J., Helme, S., Woodward, A.: Analysis of the adoption of security headers in HTTP. IET Inf. Secur.12(2), 118–126 (2017). Publisher: IET Digital Library

   Google Scholar 

5. Calzavara, S., Roth, S., Rabitti, A., Backes, M., Stock, B.: A Tale of Two Headers: A Formal Analysis of Inconsistent Click-Jacking Protection on the Web, pp. 683–697 (2020)

   Google Scholar 

6. CDNetworks: State of the Web Security, H1 (2020).https://www.cdnetworks.com

7. Kambourakis, G., Draper-Gil, G., Sanchez, I.: What email servers can tell to Johnny: an empirical study of provider-to-provider email security. IEEE Access8, 130066–130081 (2020).https://doi.org/10.1109/ACCESS.2020.3009122

   Article  Google Scholar 

8. Kranch, M., Bonneau, J.: Upgrading HTTPS in mid-air: an empirical study of strict transport security and key pinning. In: Proceedings 2015 Network and Distributed System Security Symposium, Internet Society, San Diego, CA (2015)

   Google Scholar 

9. Lavrenovs, A., Melón, F.J.R.: HTTP security headers analysis of top one million websites. In: 2018 10th International Conference on Cyber Conflict (CyCon), pp. 345–370, May 2018

   Google Scholar 

10. Le Pochat, V., Van Goethem, T., Tajalizadehkhoob, S., Korczyński, M., Joosen, W.: Tranco: a research-oriented top sites ranking hardened against manipulation. In: Proceedings of the 26th Annual Network and Distributed System Security Symposium, NDSS 2019, February 2019

    Google Scholar 

11. Mendoza, A., Chinprutthiwong, P., Gu, G.: Uncovering HTTP header inconsistencies and the impact on desktop/mobile websites. In: Proceedings of the 2018 World Wide Web Conference, WWW 2018, Republic and Canton of Geneva, CHE, pp. 247–256. April 2018

    Google Scholar 

12. OWASP: OWASP Top Ten.https://owasp.org/www-project-top-ten/

13. OWASP: Secure Headers Project.https://owasp.org/www-project-secure-headers/

14. Petrov, I., et al.: Measuring the Rapid Growth of HSTS and HPKP Deployments p. 7

    Google Scholar 

15. Scott Helme: Top 1 Million Analysis - March 2020.https://scotthelme.co.uk/top-1-million-analysis-march-2020/

16. Some, D.F., Bielova, N., Rezk, T.: On the Content Security Policy Violations due to the Same-Origin Policy. In: Proceedings of the 26th International Conference on World Wide Web, WWW 2017, Republic and Canton of Geneva, CHE, April 2017

    Google Scholar 

17. Sood, A.K., Enbody, R.J.: The Conundrum of Declarative Security HTTP Response Headers: Lessons Learned, p. 6

    Google Scholar 

18. Stock, B., Johns, M., Steffens, M., Backes, M.: How the Web Tangled Itself: Uncovering the History of Client-Side Web (In)Security, pp. 971–987 (2017)

    Google Scholar 

19. Wang, C.C., Chen, S.Y.: Using header session messages to anti-spamming. Comput. Secur.26(5), 381–390 (2007).https://doi.org/10.1016/j.cose.2006.12.012

20. Weissbacher, M., Lauinger, T., Robertson, W.: Why Is CSP failing? Trends and challenges in CSP adoption. In: Stavrou, A., Bos, H., Portokalidis, G. (eds.) RAID 2014. LNCS, vol. 8688, pp. 212–233. Springer, Cham (2014).https://doi.org/10.1007/978-3-319-11379-1_11

    Chapter  Google Scholar 

Download references