MRatWork Forum by Mustafa Ramadhan - Vulnerability SSL securityheaders

Sponsor:
Server and Web Integrator
Link:
6.5.0 or 7.0.0
Click for "How to install"
Donation/Sponsorship:
Kloxo-MR is open-source.
Donate and or Sponsorship always welcome.
Click to:

MRatWork Forum | Please login or register. | 2017-11-07, 21:32:01

- MRatWork Forum by Mustafa Ramadhan »
- Language Specific Discussions »
- Indonesia Users »
- Vulnerability SSL securityheaders

« previous next »

- Print

Pages: [1] Go Down

### Author Topic: Vulnerability SSL securityheaders (Read 1705 times)

0 Members and 1 Guest are viewing this topic.

#### masnggakdiajak

- Valuable Member
- Posts: 125
- Karma: +0/-0

##### Vulnerability SSL securityheaders

« on: 2016-04-06, 03:40:26 »
pagi...
barusan cek domain di securityheaders.io setelah dipasang ssl di kloxomr7 menggunakan nginxproxy hasilnya nilainya F
petunjuk webnya disarankan untuk menambah add_header Strict-Transport-Security, Content-Security-Policy, Public-Key-Pins, X-Frame-Options, X-XSS-Protection, X-Content-Type-Options di config nginxnya
tapi bingung nambahnya di mana, saya coba di /opt/configs/nginx/conf/globals/ssl_base.conf ndak jalan, saya coba buat folder dan file di /opt/configs/nginx/conf/ lalu saya include di /opt/configs/nginx/conf/domains/conf_domainnya juga ndak jalan,
mohon petunjuknya bang, terimakasih banyak.
Logged

#### MRatWork

- Administrator
- The Elite
- Posts: 15,381
- Karma: +112/-9
- Gender:

##### Re: Vulnerability SSL securityheaders

« Reply #1 on: 2016-04-06, 03:46:58 »
Informasikan bagaimana anda menambah ssl untuk domain terkait.
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

#### MRatWork

- Administrator
- The Elite
- Posts: 15,381
- Karma: +112/-9
- Gender:

##### Re: Vulnerability SSL securityheaders

« Reply #2 on: 2016-04-06, 03:50:02 »
Apa domainnya dan dimana tempat mengujinya.
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

#### masnggakdiajak

- Valuable Member
- Posts: 125
- Karma: +0/-0

##### Re: Vulnerability SSL securityheaders

« Reply #3 on: 2016-04-06, 03:57:36 »
saya install letsencrypt di server kemudian saya request ssl, kemudian saya masukkan ssl letsencrypt ke client di kloxomr dimenu add ssl text,
saya test di https://securityheaders.io >> nama domain https://hargapangan.egov.co.id
terimakasih,
Logged

#### MRatWork

- Administrator
- The Elite
- Posts: 15,381
- Karma: +112/-9
- Gender:

##### Re: Vulnerability SSL securityheaders

« Reply #4 on: 2016-04-06, 05:30:17 »
Ya memang 'parah' hasilnya.
Saya sudah perbaiki untuk forum ini. Lumayan hasil jadi 'B'.
Saya akan upload setelah tambahan header di semua web server.
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

#### masnggakdiajak

- Valuable Member
- Posts: 125
- Karma: +0/-0

##### Re: Vulnerability SSL securityheaders

« Reply #5 on: 2016-04-06, 06:50:24 »
sip pak jadi B forum.mratwork.com kurang header Public-Key-Pins dan Content-Security-Policy biar jadi A atau A+, upload di sini atau upload untuk di kloxonya dan saya update kloxonya pak?
terimakasih
Logged

#### MRatWork

- Administrator
- The Elite
- Posts: 15,381
- Karma: +112/-9
- Gender:

##### Re: Vulnerability SSL securityheaders

« Reply #6 on: 2016-04-06, 07:13:33 »
Baru nanti malam saya upload updatenya.
Header 'header Public-Key-Pins' dan 'Content-Security-Policy' tidak/belum diimplementasikan. Silahkan pelajari saja.
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

#### masnggakdiajak

- Valuable Member
- Posts: 125
- Karma: +0/-0

##### Re: Vulnerability SSL securityheaders

« Reply #7 on: 2016-04-06, 07:23:37 »
siap pak, oya nanti kalau saya setelah update kloxonya dan ingin menambahkan 'header Public-Key-Pins' dan 'Content-Security-Policy' saya harus edit dibagian mana pak?
terimakasih.
Logged

#### MRatWork

- Administrator
- The Elite
- Posts: 15,381
- Karma: +112/-9
- Gender:

##### Re: Vulnerability SSL securityheaders

« Reply #8 on: 2016-04-07, 04:12:13 »
Silahkan update
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

#### Wibowo

- Master
- Posts: 391
- Karma: +0/-0
- Gender:

##### Re: Vulnerability SSL securityheaders

« Reply #9 on: 2016-04-09, 16:54:28 »
Quote from: MRatWork on 2016-04-06, 05:30:17

> Ya memang 'parah' hasilnya.
> Saya sudah perbaiki untuk forum ini. Lumayan hasil jadi 'B'.
> Saya akan upload setelah tambahan header di semua web server.

kok saya masih 'F' ya pak?
padahal sudah update ke kloxomr yg baru
X-Frame-Options ; X-XSS-Protection ; X-Content-Type-Options
masih merah
btw HSTS dihapus dari versi terbaru pak?
Logged

#### MRatWork

- Administrator
- The Elite
- Posts: 15,381
- Karma: +112/-9
- Gender:

##### Re: Vulnerability SSL securityheaders

« Reply #10 on: 2016-04-10, 00:23:50 »
HSTS di-disable untuk sementara. Nantinya akan di-enable semuanya bilamana letsencrypt sudah berhasil diimplementasikan.
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

- Print

Pages: [1] Go Up
« previous next »

- MRatWork Forum by Mustafa Ramadhan »
- Language Specific Discussions »
- Indonesia Users »
- Vulnerability SSL securityheaders

Top 10 Social Networking: Facebook Twitter LinkedIn Pinterest Google Plus Tumblr Instagram VK Flickr Vine

..:: Monetize Your Website with ylliXmedia ::.. ..:: Online Advertising that Sale Anything with ylliXmedia ::..

- Design By SMFSimple.com
- SMF 2.0.14 | SMF © 2017, Simple Machines

Page created in 0.049 seconds with 18 queries.

Mirror created by MasterkinG32.CoM