Restore Referer-Policy and wrap up MbedTLS changes

redbean will now set Referer-Policy to no-referrer-when-downgrade on
text/html responses by default. There's better explanations on the bits
of security redbean is offering. In short, it's 128+ for modern clients
and 112+ for legacy. If the -B flag is used then it's 192+ for modern
and 150+ for non-EC.
This commit is contained in:
Justine Tunney 2021-08-03 22:42:17 -07:00
parent 344d2dc356
commit df8ab0aa0c
32 changed files with 679 additions and 663 deletions

View file

@ -25,9 +25,6 @@ OID get Ext Key Usage - id-kp-timeStamping
OID get Ext Key Usage - id-kp-OCSPSigning
1:hex:"2B06010505070309":char*:"OCSP Signing"
OID get Ext Key Usage - id-kp-wisun-fan-device
1:hex:"2B0601040182E42501":char*:"Wi-SUN Alliance Field Area Network (FAN)"
OID get Ext Key Usage invalid oid
1:hex:"5533445566":char*:""