Guides

What SteadyHost checks, why it matters and how to set it up yourself.

• Website down? How to find the causeIs your website down or slow? Learn how to read the HTTP status code, spot redirect loops and timeouts, and track down the cause.
• HTTPS and redirecting HTTP to HTTPSWhy HTTPS is essential and how to automatically send visitors from http:// to https:// with a 301 redirect, with nginx and Apache examples.
• How to check an SSL certificate is validWhen is an SSL certificate valid? Learn how to check that your certificate is correct, trusted and won't expire without you noticing.
• TLS versions: disable TLS 1.0 and 1.1Which TLS versions does your server accept? Why TLS 1.0 and 1.1 should be off, and how to allow only TLS 1.2 and 1.3 in nginx, Apache or your hosting.
• Security headers explained, with examplesWhat do Strict-Transport-Security, Content-Security-Policy and the other security headers do, and how do you set them up? With examples.
• Mixed content: http:// on an HTTPS pageDoes your HTTPS page load scripts, images or forms over http://? How to spot mixed content, what browsers do with it and how to fix it.
• security.txt: where to report vulnerabilitiessecurity.txt tells security researchers where to report a vulnerability. How to create the file, with an example and the required fields.
• DNS records explained: A, AAAA, MX and NSA, AAAA, CNAME, MX and NS: what DNS records do, which ones you need for your website and email, and why changes take time to take effect.
• What is DNSSEC and how do you enable it?What is DNSSEC, what does it protect against and how do you enable it at your registrar or DNS provider? Plus the pitfall when moving your DNS.
• CAA record: who can issue your certificates?A CAA record determines which certificate authorities may issue certificates for your domain. How to set it up without breaking renewals.
• Check domain registration: status and expiryWhen does your domain name expire and what does its WHOIS or RDAP status mean? How to keep your website and email from going offline unexpectedly.
• How to set up an SPF record for your domainHow to set up an SPF record: which servers may send email on behalf of your domain, the difference between -all and ~all, and common mistakes.
• How to check and set up a DKIM recordCheck your DKIM record with your selector, and learn how DKIM works, where to find your selector and how to fix common mistakes.
• What is DMARC and how do you set it up?How to set up DMARC: from p=none to p=reject, with example records for domains with and without email. Protect your domain against phishing.