Author: Leon Wimmenhoeve
Does SSL improve my security?
The short answer is Yes. SSL significantly enhances security by encrypting data, and ensures that data sent between your browser and the server is unaltered. If you need visitors to send private information over the web to your site, or vice versa, it is very important to encrypt all your data with SSL. But I would not say it is the very first thing you should do. To prevent your site from getting hacked, start with the following: Do not
Redirect rules in Nginx
Use the following to redirect to https on nginx. server { listen 80; server_name my-domain.com; return 301 https://$server_name$request_uri; }
What does “Activate SSL” in the plugin actually do?
To fully enable HTTPS/SSL on your WordPress site, you only have to click Activate SSL in this plugin, and in most cases your website will immediately work over SSL. So, what actually happened in the background? When clicking Activate SSL in the Really Simple Security (formerly Really Simple SSL) dashboard, the plugin: Checks for SSL before activating Selects the appropriate .htaccess redirect rule based on your server configuration If necessary, it adds a load balancer fix to wp-config.php. If the WordPress
Is Really Simple Security suitable for my multisite installation?
Yes, you can use Really Simple Security (Free) on WordPress Multisite. However, it is important to note that Really Simple Security Pro on Multisite environments does require the dedicated Multisite Pro version of the plugin, which is included with all of our Agency plans (25 sites and upwards). Activating and managing Really Simple Security on WordPress Multisite is done within the Network Admin dashboard and the settings will apply to all (sub)sites on the network. Please note that on WordPress Multisite, enforcing
Parts of my site are not loading
Did you enforce SSL on your site with Really Simple Security, and now some images, stylesheets, or external services are no longer loading? When a site is requested over the SSL protocol (https), the browser will no longer load resources which are called with the (insecure) http protocol: this is called “mixed content” or “insecure content”. To fix this, Really Simple Security changes all URLs to https://. However, if you load resources from third-party domains that do not have a