A declaration of how to protect Web content, and how to protect data that is communicated between the client and the server.