WordPress插件：Really Simple SSL

官方简介

Really Simple SSL will automatically configure your website to use SSL to its fullest potential. Use extra hardening features to secure your website, and use our server health check to keep up-to-date.

Features

• Easy SSL Migration: Takes your website to HTTPS in just one-click.
• Server Health Check (New): Your server configuration is every bit as important for your website security.
• WordPress Hardening (New): Tweak your configuration and keep WordPress fortified and safe by tackling its weaknesses.

使用真正简单的 SSL Pro 提高安全性

• The Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix it. Both Front- and Back-end.

Security Headers

These features mitigate the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware among others.

• Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX etc.
• Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options and Referrer Policy.
• Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list.

Advanced Security

Isolate your website from unnecessary file loading and exchanges with third-parties. Fully control your website and minimize risk of manipulation.

• Specifically designed for WordPress.
• Control third-parties with the Content Security Policy – including Learning Mode.
• Control browser features with the Permissions Policy e.g. geolocation, camera’s and microphones.
• Isolate information exchange between other websites. Fully control in- and outbound of data.

How does Really Simple SSL’s HTTPS migration work?

• 它将首先检查现有的 SSL 证书。如果没有，可以在插件中生成一个。根据您的托管服务提供商，该插件还可以为您安装或协助说明。
• If needed, It will handle known issues WordPress has with SSL. An example might be that your website uses a loadbalancer, proxy or headers are not passed to detect a certificate.
• All incoming requests are redirected to HTTPS with a default 301 WordPress redirect. You can also choose a .htaccess redirect.
• 站点 URL 和主页 URL 更改为 HTTPS。
• Your insecure content is fixed by replacing all HTTP:// URLs with HTTPS://, except external hyperlinks, dynamically.
• 使用 PHP 设置的 Cookie 是通过使用 httpOnly 标志来安全设置的。

Useful Links

• Documentation
• SSL Definitions
• Translate Really Simple SSL
• Issues & pull requests
• Feature requests

爱上 Really Simple SSL?

希望这个插件可以为您节省几个小时的工作。如果您想支持此插件的持续开发，请考虑购买真正简单的 SSL Pro ，其中包括一些出色的安全功能和高级支持。

About Really Simple Plugins

还可以查看由真正简单的插件开发的其他插件： Complianz和Zip 食谱。

如果您有任何疑问、问题或建议，请与我们联系。真正简单的 SSL 是由真正简单的插件开发的。

对于免费的 SSL 证书生成，Really Simple SSL 使用le acme2 PHP Let’s Encrypt 客户端库，感谢 ‘fbett’ 提供。

有什么代码建议吗？我们也在GitHub 上！