API Protocols
HTTP
HTTPS
DNS
DoH
Proxy
Email protocols (SMTP, POP3, IMAP, DMARC, DKIM)
SSH
Syslog
IPSec
Wireguard (this includes protocols that are used by services above)
Login
Password-based with optional temporary two-factor authentication
OAuth/OIDC SSO
Authentication
Session-based (HttpOnly, Secure, and SameSite)Frontend / backend Communication
REST API
Encryption with TLSv1.3
Additional Security Measures
Content-Security-Policy (CSP)
Strict-Transport-Security (HSTS)
X-Content-Type-Options: nosniff
X-Frame-Options: DENY