webapp-tls-ssl
--| | banking.example.com | Chrome (cached) | Active | BLOCKED | | banking.
SKILL.mdskills/webapp-tls-ssl/SKILL.md
GitHub--| | banking.example.com | Chrome (cached) | Active | BLOCKED | | banking.example.com | Chrome (fresh) | Preloaded | BLOCKED | | banking.example.com | Mobile App | Not Enforced | VULNERABLE | | api.banking.example.com | Chrome (fresh) | Not Preloaded | VULNERABLE (first visit) |
Recommendations
- Implement TLS certificate pinning in the mobile banking app (Critical)
- Submit api.banking.example.com to HSTS preload list separately
- Add Content-Security-Policy: upgrade-insecure-requests header
- Implement certificate transparency monitoring for the domain