Security Features

How to find where (unwanted) security headers are set

In some cases you may get the warning: “Header x has been set to the non-recommended value “**”, or You tried to disable “header”, but this is not possible because it is set by a third party. This means that a third party, not Really

Read More

How to set Security Headers on Apache and NGINX

advanced-headers.php A new option in Really Simple SSL Pro 5.5 is ‘advanced-headers.php’ which is a general solution for incompatibilities between servers, caching, and other configurations. We recommend trying advanced-headers.php to resolve issues you encounter when setting headers. × Dismiss alert Below we will discuss the

Read More

How to use the Permission Policy header

The Permissions-Policy HTTP header replaces the existing Feature-Policy header for controlling delegation of permissions and powerful features. The header uses a structured syntax, and allows sites to more tightly restrict which origins can be granted access to features. This will be released in Really Simple

Read More