This is the second in a three part series of posts on; Setting up a personal Certification Authority, Securing Apache with Client Certificates, and Setting up FreeRADIUS to secure your WiFi.

So in the previous post we setup a Certification Authority and generated a Client Certificate, now let's use it …

This week I decided to play around with securityheaders.io and see if I could get an A+ rating.

I already had Public Key Pinning and Strict Transport Security so those two were easy.

Then I added Xss-Protection, but I wasn't sure what exactly it did. After a bit of …