Results for “hsts”
1 fix page and 6 guides.
Fix pages
Guides
- Security11 min read
HSTS: enabling it safely and joining the preload list
Turn on Strict-Transport-Security without locking anyone out, raise max-age in three stages, and decide whether the browser preload list is worth a commitment that is hard to undo.Updated 25 Sept 2026 - Platforms11 min read
Apache .htaccess for an A grade: headers, redirects, caching
A tested .htaccess, built section by section, that gives an Apache or LiteSpeed site one-hop redirects, security headers, compression, cache lifetimes and no exposed files.Updated 25 Sept 2026 - Platforms10 min read
Caddy: the two-line https server and the headers to add to it
Caddy gets certificates, redirects to HTTPS and serves HTTP/2 and HTTP/3 with no configuration. Here is what it does by default, what it does not, and the Caddyfile that passes every report check.Updated 25 Sept 2026 - Platforms14 min read
Cloudflare settings for speed and security, on the free plan
The Cloudflare free-plan settings that make a report go green, in order, with what each one changes, the traps (Flexible SSL, cache everything, Rocket Loader) and how to verify from outside.Updated 25 Sept 2026 - SEO11 min read
HTTPS migration SEO: move from http to https without losing rankings
Moving from http to https changes every URL on your site. The SEO steps in the right order: certificate, one-hop redirects, canonicals, sitemaps, mixed content, Search Console and HSTS last.Updated 26 Sept 2026 - WordPress10 min read
Security headers in WordPress without a plugin
Where to set HSTS, CSP, X-Frame-Options and Referrer-Policy on a WordPress site: web server, Cloudflare, host panel or a ten-line mu-plugin, with values that keep wp-admin working.Updated 25 Sept 2026