Easy to use plugin
-
I installed this plugin and its configuration is relatively simple and provides 30% to 40% more performance. For some unknown reason, the Gzip compression cannot be deactivated in my case and after activating the browser cache (Static file header), don’t look for a button to deactivate it, you must read the small inscription “Empty or 0 values disable the headers”. By doing this or disabling the plugin, the .htaccess file is properly cleaned up. This plugin could do almost everything on its own, it just lacks a feature that would allow you to configure the security headers, by adding in the .htaccess:
Header set Strict-Transport-Security: max-age=31536000;
Header set Expect-CT: max-age=31536000;
Header set Content-Security-Policy “”
Header set X-Frame-Options: SAMEORIGIN
Header set Referrer-Policy: no-referrer-when-downgrade
Header set X-XSS-Protection: “1; mode=block”
Header set X-Content-Type-Options: nosniff
Header always unset X-Powered-By
Header unset X-Powered-By
Thus, the result of the test on webpagetest.org would be optimal.
In the meantime, you have to use the “HTTP headers to improve web site security” plugin.
- The topic ‘Easy to use plugin’ is closed to new replies.