A Hardened Web Server

Following a responsible-disclosure report, our web server now refuses connections that don't use one of our domain names and no longer reveals its software version, and www.auditsu.com now sends the HSTS header that tells browsers to always use HTTPS, like our other domains.

Thanks to Muhammad Uzair Khan on LinkedIn, whose report prompted this.