HTTP Security Headers
Easy way to secure a web application
They restrict behaviours permitted by browsers and servers once an app is running.
HTTPS
HTTPS is an implementation of TLS encryption on top of the HTTP protocol
TLS protocol properties
Encryption: hides the data being transferred from third parties
Integrity: verifies that the data has not been forged or tampered with
Authentication: ensures that the parties exchange information are who they claim to be