Open
Cached
·
just now
93/100
SECURITY SCORE
Certificate Information
Subject
CN=canny-assets.io
Issuer
C=US, O=Amazon, CN=Amazon RSA 2048 M03
Valid From
July 24, 2025
Valid Until
August 22, 2026
261 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
0B:1A:A7:B5:16:76:28:88:CE:02:3A:22:FC:2B:6C:22:20:58:C8:E4:9C:C8:CE:92:04:A5:16:21:A3:02:D0:A2
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=63072000; includeSubDomains; preload
Content-Security-Policy
Good
frame-ancestors; base-uri; default-src; +11 more
frame-ancestors 'self'; base-uri 'self'; default-src 'self' https://canny.io https://*.canny.io; child-src 'self' blob: https://canny.io https://*.canny.io https://www.facebook.com https://bid.g.doubleclick.net https://td.doubleclick.net https://recaptcha.recaptcha.net/recaptcha/ https://www.recaptcha.net/recaptcha/ https://*.googletagmanager.com https://*.hs-sites.com https://intercom-sheets.com https://share.intercom.io https://www.intercom-reporting.com https://*.cloud.microsoft.com https://teams.microsoft.com https://*.teams.microsoft.com https://*.office.com https://*.microsoft365.com https://platform.twitter.com/ https://*.wistia.net https://*.youtu.be https://*.youtube.com https://youtu.be https://youtube.com; connect-src 'self' https://canny.io https://*.canny.io https://www.facebook.com https://*.g.doubleclick.net https://*.google.com https://google.com https://googleadservices.com https://stats.g.doubleclick.net https://td.doubleclick.net https://*.analytics.google.com https://*.google-analytics.com https://*.googletagmanager.com https://api.hubapi.com https://*.hubspot.com https://*.hsappstatic.net https://*.intercom.io https://uploads.intercomcdn.com https://uploads.intercomusercontent.com wss://*.intercom.io https://cdn.linkedin.oribi.io https://px.ads.linkedin.com https://*.clarity.ms https://bat.bing.com https://*.cdn.office.net https://api-js.mixpanel.com https://*.reddit.com https://*.redditstatic.com https://www.redditads.com https://*.sentry.io https://sentry.io https://*.wistia.com https://*.wistia.net https://*.litix.io https://embedwistia-a.akamaihd.net; font-src * data:; form-action https://canny.io https://*.canny.io https://www.facebook.com https://api-iam.intercom.io https://intercom.help; img-src * data: https://canny.io https://*.canny.io https://ct.capterra.com https://google.com https://www.google.com https://googleads.g.doubleclick.net https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com *.hubspot.com https://canny-assets.io; media-src * blob: data: https://canny-assets.io; object-src 'none'; script-src 'self' 'nonce-8KDm3fJG4ZtGogy2kj7rSQ==' https://canny.io https://*.canny.io https://connect.facebook.net https://googleads.g.doubleclick.net https://www.google.com https://www.googleadservices.com https://www.google-analytics.com https://www.recaptcha.net/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://*.googletagmanager.com https://www.googletagmanager.com https://*.hubspot.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-scripts.com https://js.hsadspixel.net https://js.hscollectedforms.net https://js.hsleadflows.net https://*.intercom.io https://js.intercomcdn.com https://snap.licdn.com https://*.clarity.ms https://bat.bing.com https://g.microsoft.com https://cdn.mxpnl.com https://www.redditstatic.com https://*.reddit.com https://*.sentry-cdn.com https://platform.twitter.com/ https://*.wistia.com; style-src 'self' 'unsafe-inline' https://canny.io https://*.canny.io; worker-src blob:; report-uri https://canny.io/api/csp/report
X-Frame-Options
Good
sameorigin
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Strengthen CSP by removing 'unsafe-eval'
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports