Systems and methods for certifying client-side security for internet sites

摘要

A computer-implemented method for certifying client-side security for Internet sites may include 1) identifying an Internet site that is subject to a security evaluation, 2) retrieving at least one resource from the Internet site, 3) parsing the resource to determine that the resource includes at least one client-side security policy for an Internet client to enforce on the Internet site, and 4) certifying the Internet site as providing client-side security based on determining that the resource includes the client-side security policy. Various other methods, systems, and computer-readable media are also disclosed.

主权项

1. A computer-implemented method for certifying the security of Internet sites, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising:
evaluating, via a security vendor server, the security of an Internet site by:
retrieving a plurality of hypertext documents from the Internet site;checking the plurality of hypertext documents for client-side security policies configured to be enforced by a browser of a client attempting to access the Internet site, the checking comprising parsing respective headers of the plurality of hypertext documents to determine that each hypertext document within the plurality of hypertext documents comprises at least one client-side security policy that is configured to be enforced by a browser of a client attempting to access the Internet site; based on determining that each hypertext document within the plurality of hypertext documents comprises the client-side security policy that is configured to be enforced by a browser of a client attempting to access the Internet site, certifying, via the security vendor server, that the Internet site provides client-side security by providing a trust seal for display on the Internet site, wherein the trust seal certifies, to visitors of the Internet site, that the Internet site provides a client-side security policy for client-side Internet browsers to enforce.