• Resolved zauroman

    (@zauroman)


    I installed these headers in htaccess

    Really Simple SSL

    Header always set Strict-Transport-Security “max-age=31536000; includeSubDomains; preload”

    Header always set X-XSS-Protection “0”

    Header always set X-Content-Type-Options “nosniff”

    Header always set Referrer-Policy “strict-origin-when-cross-origin”

    Header always set X-Frame-Options: “SAMEORIGIN”

    Header always set Permissions-Policy: “geolocation=(); midi=();notifications=();push=();sync-xhr=();accelerometer=(); gyroscope=(); magnetometer=(); payment=(); camera=(); microphone=();usb=(); xr=();speaker=(self);vibrate=();fullscreen=(self);”

    End Really Simple SSL

    But they still write to me that not all headers are installed
    screenshot
    https://ibb.co/G3gm1pt
    What did I miss?
    I may not have installed the Upgrade Insecure Request, but I do not know how to install it.
    I also have a question, did I set all the headers correctly? I have a poor understanding of these security headers

    • This topic was modified 1 year, 2 months ago by zauroman.
Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Author Mark

    (@markwolters)

    Hi @zauroman,

    could you provide us with your domain name so we can have a look at what the issue might be?

    Thread Starter zauroman

    (@zauroman)

    Can I send you my domain to your email?

    Plugin Author Mark

    (@markwolters)

    You can either attach the domain to this support request by editing your request and filling in the ‘Link to the page you need help with’ field, which will show the domain to logged in users on the WordPress.org forums only, or send it to us privately via https://really-simple-ssl.com/support/

    Thread Starter zauroman

    (@zauroman)

    I have sent you a question and a domain through your website

    Plugin Support jarnovos

    (@jarnovos)

    Hi @zauroman,

    I have answered your question by e-mail. If you have any further questions; feel free to reply to the e-mail once more and we would be glad to assist further.

    I’ll mark this thread as resolved for now.

    Kind regards, Jarno

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Not all security headers are installed’ is closed to new replies.