Test Improvement - HTTP & Network - Extended

[7h3Rabbit]

Suggested Improvements:

• Check HTTP Method support/use
• Validate CAA – Certification Authority Authorization
• Validate that same website over IPv6 and IPv4
• Validate Ciphers support & cipher order

In progress:

• Validate use of DNSSEC ( https://www.cloudflare.com/dns/dnssec/how-dnssec-works/ )

[7h3Rabbit]

we should add timeout according to request in #121

[cockroacher]

We should check if X-Frame-Options is used and

adjust rating for setting 'frame-ancestors' directive to 'none' is similar to X-Frame-Options: deny (which is also supported in older browsers).

CSP Improvements

• Validate correct CSP hash format ( <hash-algorithm>-<base64-value>)
• We should check CSP nonce length as it should not be guessable.

TLS Improvements

• Check cipher security
• re add support for identify wrong certificate