Security & Encryption
Transparent documentation of our transport layer security, certificate management, and data protection standards.
// Connection Status
🔒 Protocol
Latest transport layer security protocol enforced across all endpoints.
📜 Certificate
EV SSL issued by Let's Encrypt / DigiCert. Auto-renewal active.
🛡️ Perfect Forward Secrecy
Ephemeral key exchange (ECDHE) ensures past sessions remain secure.
⚡ HSTS
Forces HTTPS for 1 year, including subdomains. Preloaded in browsers.
// Certificate Details
| Field | Value |
|---|---|
| Subject Alternative Names | *.1990webarchive.com, 1990webarchive.com, api.1990webarchive.com |
| Issuer | DigiCert Global Root G2 |
| Key Algorithm | RSA 4096-bit / ECDSA P-384 |
| Signature Algorithm | SHA-256 with RSA |
| Valid From | 2025-01-15 00:00:00 UTC |
| Valid Until | 2026-02-12 23:59:59 UTC |
| SHA-256 Fingerprint | A3:4F:9C:11:E8:7D:22:B9:04:F5:8A:12:C3:99:D0:4E:77:81:F4:33:A2:10:55:CC:66:E9:11:88:44:09:AA:22 |
// Security Headers
HTTP Response Security Policy
- Strict-Transport-Securitymax-age=31536000; includeSubDomains; preload
- Content-Security-Policydefault-src 'self'; script-src 'self' 'unsafe-inline'; img-src 'self' data: *.archive.org
- X-Content-Type-Optionsnosniff
- X-Frame-OptionsDENY
- X-XSS-Protection1; mode=block
- Referrer-Policystrict-origin-when-cross-origin
- Permissions-Policycamera=(), microphone=(), geolocation=()
// Privacy & Data Handling
🔐 End-to-End Encryption
All API requests and archive downloads are encrypted in transit. Sensitive researcher credentials are hashed using bcrypt.
📦 Minimal Logging
We log only anonymized IP ranges and request timestamps for rate-limiting. No personal data is stored beyond 30 days.
🌍 Data Residency
Archival data is distributed across geographically redundant nodes. User metadata complies with GDPR & CCPA standards.
Found a Vulnerability?
We take security seriously. Please report issues privately. We follow responsible disclosure guidelines and reward valid findings.
Report Vulnerability /.well-known/security.txt | PGP Key: 8F3A 4B2C 9D11 E5F0