Day: December 5, 2015
Does SSL improve my security?
The short answer is Yes. SSL significantly enhances security by encrypting data, and ensures that data sent between your browser and the server is unaltered. If you need visitors to send private information over the web to your site, or vice versa, it is very important to encrypt all your data with SSL. But I would not say it is the very first thing you should do. To prevent your site from getting hacked, start with the following: Do not
Redirect rules in Nginx
Use the following to redirect to https on nginx. server { listen 80; server_name my-domain.com; return 301 https://$server_name$request_uri; }
What does “Activate SSL” in the plugin actually do?
To fully enable HTTPS/SSL on your WordPress site, you only have to click Activate SSL in this plugin, and in most cases your website will immediately work over SSL. So, what actually happened in the background? When clicking Activate SSL in the Really Simple Security (formerly Really Simple SSL) dashboard, the plugin: Checks for SSL before activating Selects the appropriate .htaccess redirect rule based on your server configuration If necessary, it adds a load balancer fix to wp-config.php. If the WordPress
Is Really Simple Security suitable for my multisite installation?
Yes, you can use Really Simple Security (Free) on WordPress Multisite. However, it is important to note that Really Simple Security Pro on Multisite environments does require the dedicated Multisite Pro version of the plugin, which is included with all of our Agency plans (25 sites and upwards). Activating and managing Really Simple Security on WordPress Multisite is done within the Network Admin dashboard and the settings will apply to all (sub)sites on the network. Please note that on WordPress Multisite, enforcing
Parts of my site are not loading
Did you install Really Simple SSL on your site, and now some images, stylesheets, or external services are not loading? When a site is requested over the SSL protocol (https), the browser will block all resources that are called with the (insecure) http protocol. This is called “mixed content” or “insecure content”. To fix this, the Really Simple SSL plugin changes all URLs to https://. If you have resources on other domains, that do not have a valid SSL certificate,