I’ve written previously about both CSP (Content Security Policy) and SRI (Sub Resource Integrity), both of which are mechanisms that can be used to better secure your website. CSP (or Content Security Policy) allows you to set a number of directives about what types of content can be loaded by your website, and what locations they can…
Tag: security
Web ARX Security
I’ve written before about the Web ARX Security plugin for WordPress, which I’m a big fan of. In fact it’s even better now! Previously it was only available for WordPress, but now you can apply it to any PHP-based website, so it works with Joomla, Drupal and Magento as well. You can also configure the…
WordPress plugins for Better Security
In recent weeks I have created and published two WordPress plugins, my first but certainly not last additions to the plugins library. Better Passwords This is a WordPress plugin that stops the use of a bad passwords, including those in the Have I Been Pwned? breached password database. This plugin sets a default minimum password…
Web ARX Security
Securing websites can be a tricky business, but it’s something I pride myself at being pretty good at. However, when you’re setting up and managing multiple WordPress sites, it can be hard to keep on top of them all at once. Step in Web ARX Security (affiliate link). In their own words… Website firewall, uptime monitoring and…
Your website should be secure (yes, you!)
So you’ve got a small website, maybe a blog or local company website, and you don’t collect any personal data or accept credit card payments, so you don’t need to worry about going secure and using HTTPS, right? Wrong! Every website should be secure. All of them. Yes, yours! Confidentiality The first reason that you…
HSTS preloading
For a while now, my website has been using HSTS. HSTS stands for HTTP Strict Transport Security, and essentially it’s a response header that your server sends back with your website to tell that browser that in future, this page should always be requested securely (via HTTPS). I talked about it briefly last year in…