1
0
mirror of https://github.com/moparisthebest/mail synced 2024-11-12 20:25:01 -05:00

update security in readme

This commit is contained in:
Tankred Hase 2014-01-16 12:36:23 +01:00
parent 06abba569d
commit 19f0ca521a

View File

@ -13,7 +13,7 @@ Whiteout Mail is an easy to use email client with integrated OpenPGP encryption
* Mail server [SSL certificates are pinned](http://security.stackexchange.com/questions/29988/what-is-certificate-pinning) under [`src/ca/`](https://github.com/whiteout-io/mail-html5/tree/master/src/ca) in order to protect against SSL stripping and other man in the middle attacks.
* [Content Securit Policy (CSP)](http://www.html5rocks.com/en/tutorials/security/content-security-policy/) is enforced to prevent against injection attacks.
* [Content Security Policy (CSP)](http://www.html5rocks.com/en/tutorials/security/content-security-policy/) is enforced to prevent against injection attacks.
* The code is still under heavy development and is not yet recommended for production use. That being said, we have done multiple code audits and penetration tests (which will be published regularly once all reported vulnerabilities are fixed).