---
title: "#110: How To Secure Your Web App With HTTP Headers"
publication: "StatusCode Weekly"
issue: 110
published_at: "2017-04-05"
canonical_url: "https://weekly.statuscode.com/issues/110"
---

WebOps Weekly 110   . 

The latest Web operations, HTTP, and Web performance news -[Read this on the Web](http://webopsweekly.com/issues/110) 

[![WebOps Weekly\](http://webopsweekly.com/images/webops-header.png)](http://webopsweekly.com) Issue 110 — April 5, 2017     

[How To Secure Your Web App With HTTP Headers](https://www.smashingmagazine.com/2017/04/secure-web-app-http-headers/?utm_source=webopsweekly&utm_medium=email) tutorial Hagay Lupesko reviews key security-related HTTP headers and demonstrates their use in mitigating security vulnerabilities and cyber-attacks. Smashing Magazine [Spotify’s Love/Hate Relationship with DNS](https://labs.spotify.com/2017/03/31/spotifys-lovehate-relationship-with-dns/?utm_source=webopsweekly&utm_medium=email) story A look at how Spotify design and manage their DNS infrastructure, and the future of _“the lovably boring technology”_ at Spotify. Lynn Root [AWS CloudFront Gets Fast Invalidations (Under 1 Minute)](https://forums.aws.amazon.com/ann.jspa?annID=4521&utm_source=webopsweekly&utm_medium=email#cloudfrontfaster) news Content invalidation will now occur globally in under a minute. Amazon [Adding Document Validation Rules Using MongoDB Compass](https://www.mongodb.com/blog/post/adding-document-validation-rules-using-mongodb-compass-15?jmp=cpress&utm_campaign=WW_CP_newsletter_sponsorship_FY17Q2&utm_content=sponsored&utm_medium=display&utm_source=webopsweekly) Learn how MongoDB Compass makes it easy to create and modify rules that ensure all documents written to a collection contain the data you expect to be there. MONGODBsponsored[![\](https://copm.s3.amazonaws.com/f912a8b8.png)](https://www.mongodb.com/blog/post/adding-document-validation-rules-using-mongodb-compass-15?jmp=cpress&utm_campaign=WW_CP_newsletter_sponsorship_FY17Q2&utm_content=sponsored&utm_medium=display&utm_source=webopsweekly) [Deploying Node.js Microservices to AWS using Docker](https://community.risingstack.com/deploying-node-js-microservices-to-aws-using-docker/?utm_source=webopsweekly&utm_medium=email) tutorial Building a simple Node.js microservice and packaging it in a Docker container - then hosting the container on AWS. Carlos Justiniano [Linkerd-tcp: A Lightweight, Service-Discovery-Aware, TLS-ing TCP Load Balancer](https://blog.buoyant.io/2017/03/29/introducing-linkerd-tcp/?utm_source=webopsweekly&utm_medium=email) tools Integrates with a wide variety of service discovery and orchestration systems including Kubernetes, DC/OS, and Consul. Oliver Gould [Switching from NGINX to Caddy](https://blog.kixpanganiban.com/switching-from-nginx-to-caddy/?utm_source=webopsweekly&utm_medium=email) tutorial Caddy is an HTTP/2 server written in Go with simple configs and built-in Let’s Encrypt support. You can even put it [in front of a Heroku app.](https://docs.dockhero.io//tutorials/caddy.html) Kix Panganiban [Deploy .NET Core With Docker and Now.sh](https://www.twilio.com/blog/2017/03/deploy-net-core-with-docker-and-now-sh.html?utm_source=webopsweekly&utm_medium=email) tutorial Learn how to containerize a .NET Core application and then deploy it using Docker. Dominik Kundel [Country-by-Country Web and Connectivity Statistics](https://www.webworldwide.io/?utm_source=webopsweekly&utm_medium=email) tools The web isn’t experienced the same way everywhere — this site lets you pick a country and see how users there fare with data speeds and costs. Tim Kadlec In brief [DigitalOcean Now Provides (Free) Monitoring](https://www.digitalocean.com/company/blog/introducing-monitoring/?utm_source=webopsweekly&utm_medium=email) news Exposes system metrics and offer alerts for each ‘droplet’/VM you run. DigitalOcean [VMware Sells Off Cloud Services Business to OVH](http://www.datacenterknowledge.com/archives/2017/04/04/vmware-sells-off-cloud-services-business-to-ovh/?utm_source=webopsweekly&utm_medium=email) news Data Center Knowledge [Google Container Engine Makes Kubernetes 1.6 Available](https://cloudplatform.googleblog.com/2017/04/Google-Container-Engine-fires-up-Kubernetes-1-6.html?utm_source=webopsweekly&utm_medium=email) news Google Cloud Platform [AWS Launching a Swedish Region in 2018](https://aws.amazon.com/blogs/aws/coming-in-2018-new-aws-region-in-sweden/?utm_source=webopsweekly&utm_medium=email) news Amazon [$20 Free Credit on a new account](https://welcome.linode.com/webopsweekly/?utm_source=webopsweekly&utm_medium=email&utm_term=webops-weekly&utm_campaign=webops-weekly-sponsored) Linux cloud hosting starting at 1GB of RAM for $5/mo. Use promo code WEBOPS20 and get $20 credit. linodesponsored [Continuous Deployment of a Dockerized Node.js Application to AWS ECS](https://semaphoreci.com/community/tutorials/continuous-deployment-of-a-dockerized-node-js-application-to-aws-ecs?utm_source=webopsweekly&utm_medium=email) tutorial J.​ Cole Morrison [How to Speed Up Your MySQL with Replication to an In-Memory Database](http://highscalability.com/blog/2017/3/29/how-to-speed-up-your-mysql-with-replication-to-in-memory-dat.html?utm_source=webopsweekly&utm_medium=email) tutorial High Scalability [Creating a Simple API Client in Go(lang)](https://www.scaledrone.com/blog/posts/creating-an-api-client-in-go?utm_source=webopsweekly&utm_medium=email) tutorial Scaledrone [Tips on Scaling Your API with Rate Limiters](https://stripe.com/blog/rate-limiters?utm_source=webopsweekly&utm_medium=email) tutorial Paul Tarjan (Stripe) [How to Install an ELK Stack on Google Cloud Platform](https://logz.io/blog/elk-stack-google-cloud/?http://logz.io/blog/real-time-analytics/=&utm_source=webopsweekly&utm_medium=email) tutorial ELK being Elasticsearch, Logstash and Kibana. PJ Hagerty [The Stack That Helped Opendoor Buy and Sell Over $1B in Homes](https://stackshare.io/opendoor/the-stack-that-helped-opendoor-buy-and-sell-over-$1b-in-homes?utm_source=webopsweekly&utm_medium=email) story Alex Zirbel [How Algolia Reduces Latency for 21B Searches Per Month](https://stackshare.io/algolia/how-algolia-reduces-latency-for-21b-searches-per-month?utm_source=webopsweekly&utm_medium=email) story StackShare [HTTP Prompt: An Interactive Command-Line HTTP Client](http://http-prompt.com/?utm_source=webopsweekly&utm_medium=email) tools Chang-Hung Liang [Want More Insight Into Errors Than New Relic? ✅](https://rollbar.com/webopsweekly?utm_source=webopsweekly&utm_medium=email) tools See how Rollbar pairs with New Relic to give greater coverage/insights into your application errors. Get x-ray vision into broken code. ROLLBARsponsored [Goss: A Server Testing/Validation Tool](https://github.com/aelsabbahy/goss?utm_source=webopsweekly&utm_medium=email) tools Uses a YAML-based spec for validating a server’s configuration over time. Ahmed Elsabbahy [Chalice: Python Serverless Microframework for AWS](https://github.com/awslabs/chalice?utm_source=webopsweekly&utm_medium=email) tools Quickly create and deploy applications that use Amazon API Gateway and AWS Lambda. Amazon Web Services [GreenLightning: A Small, Fast, Low Footprint Java HTTP(S) Server](https://github.com/oci-pronghorn/GreenLightning?utm_source=webopsweekly&utm_medium=email) code Boasts supporting 500K+ requests per second. oci-pronghorn    [Read this issue on the Web](http://webopsweekly.com/issues/110) [See our archives](http://webopsweekly.com/issues) [Change your email address](*|UPDATE_PROFILE|*)  [Stop getting this newsletter](*|UNSUB|*)  

Published by [Cooperpress](https://cooperpress.com/)
Fairfield Enterprise Centre, Lincoln Way, Louth, LN11 0LS, UK