SSL & Security: guides
Certificates, HTTPS, security headers and cookies: how they work, how they fail and how to harden a site without breaking it.
Guide · SSL & SecurityContent Security Policy (CSP) Guide: Directives, Nonces, RolloutBuild a Content Security Policy that works: key directives, nonces and strict-dynamic, Report-Only rollout, violation reports, and fixes for common breakage.7 min readGuide · SSL & SecurityCookie Flags Explained: Secure, HttpOnly and SameSiteWhat the Secure, HttpOnly, SameSite, Domain, Path and cookie prefix attributes do, how to set them in common stacks, and how to debug cookies that go missing.7 min readGuide · SSL & SecurityHow to Check an SSL Certificate Expiry Date (3 Easy Ways)Find out when your SSL certificate expires using a free online checker, your browser, or one command, and learn what to do if the date is close or has passed.7 min readGuide · SSL & SecurityHow to Renew an SSL Certificate and Automate It for GoodLearn the certificate lifecycle, automate renewals with certbot, Caddy or acme.sh, add reload hooks, test with a dry run and monitor expiry before users notice.9 min readGuide · SSL & SecurityHSTS Preload Guide: Requirements, Risks and How to SubmitLearn what the HSTS preload list is, the exact requirements, the risks of includeSubDomains, how to submit your domain safely, and why removal takes months.7 min readGuide · SSL & SecurityHTTP Security Headers Guide: HSTS, CSP, Referrer-Policy and MoreA practical guide to HSTS, CSP, X-Content-Type-Options, frame-ancestors, Referrer-Policy and Permissions-Policy, with nginx, Apache and Express examples.8 min readGuide · SSL & SecurityLet's Encrypt Renewal Failures: Certbot Debugging GuideWhy certbot renewals fail and how to fix them: http-01 and dns-01 challenges, firewalls, redirects, rate limits, timers, and the exact debug commands.8 min readGuide · SSL & SecurityMixed Content Warnings: How to Find and Fix HTTP Resources on HTTPSUnderstand active vs passive mixed content, hunt down http:// references in HTML, CSS, JS and databases, fix them with wp-cli or CSP, and verify the result.8 min readGuide · SSL & SecuritySSL Certificate Types Explained: DV, OV, EV, Wildcard and SANCompare DV, OV and EV certificates, wildcard and multi-domain (SAN) options, and learn what certificate lifetimes really are today and where they are heading.7 min readGuide · SSL & SecuritySSL/TLS Certificate Errors Explained: Causes, Diagnosis and FixesDecode browser errors like ERR_CERT_COMMON_NAME_INVALID and ERR_CERT_AUTHORITY_INVALID, diagnose them with openssl and curl, and fix each root cause.10 min read