Security Resources for Your New Website

Wed, 11 Mar 2020 23:32:43 +0100

Establishing a reasonable amount of security for a website is a non-trivial unending job. Here are some notes and resources that I find helpful.

Web Server Config

Start with TLS

All public-facing websites need to be protected by Transport Layer Security (TLS). TLS is a technology which allows web traffic to be encrypted and this encryption helps to protect the privacy and security of the users of a site.

Deploying a site with TLS can be accomplished in a free and automated fashion. Services like Let’s Encrypt and the issuance features of large cloud providers (for example AWS Certificate Manager) encourage more secure defaults and automatic management. For more information, check out the Let’s Encrypt Getting Started Guide or your hosting provider’s documentation.

Web Dev on galvanist

Security Resources for Your New Website

Web Server Config

Start with TLS