Category: WordPress Security
What are Secure Cookies?
HTTP cookies are small packets of data stored in your browser. This data may contain sensitive data like passwords or user information and is therefore vulnerable for attacks. To limit vulnerability you can ‘secure’ your cookies by adding specific attributes to the set cookies, making it harder to manipulate by outsiders. Really Simple SSL uses the HttpOnly, secure and use_only_cookies parameters to make cookies more secure. Since Really Simple SSL helps you in securing your website by switching your site to
HSTS: HTTP Strict Transport Security, and why it’s good to have it
HSTS (HTTP Strict Transport Security) is available in Really Simple Security (Pro), and most people just activate it. But it’s good to know why you need it. When you have an SSL certificate on your domain, anyone can still use your site over the http (insecure). The simplest solution is to add a redirect. That’s one of the features of Really Simple Security: it adds the redirect to your site that forces it to load over SSL. But what if a malicious