Web / Headers
HTTP security headers explained
HSTS, Content-Security-Policy, X-Frame-Options and friends — the headers that force HTTPS, block injected scripts and stop clickjacking, with copy-paste examples.
Read the guide → TLS / HTTPSTLS & SSL explained
What actually makes HTTPS strong: protocol versions, cipher suites, forward secrecy and certificates — and how to reach an A+ configuration.
Read the guide → EmailStop email spoofing: SPF, DKIM & DMARC
The three DNS records that prove your mail is really yours, improve deliverability and stop attackers sending phishing "from" your domain.
Read the guide →