Useful technology, techniques and stories from modern web development and design
Entries filed under Security.
Install a valid certificate covering every hostname the site actually answers on, including the www variant if it resolves. A certificate that covers the apex but not the subdomain produces a warning that is more alarming to visitors than no encryption at all.
Filed under: Security, Tips, Tutorials, Web Development · Permalink
Plugin recommendations date badly, but the categories do not. A content site generally needs help in four places: search metadata, security hardening, caching and performance, and backups. Everything else is specific to the project.
Filed under: Resources, Security, SEO, Web Development, WordPress, WordPress Plugins · Permalink
The release began marking HTTP pages that collect passwords or card details as not secure, directly in the address bar. Previously the absence of encryption was communicated by the absence of a padlock, which almost nobody notices.
Filed under: Security, SEO, Web Development · Permalink