Hardening
TLS and security headers — operator checklist
2026-07-01
Quick pass
· TLS 1.2+ only
· HSTS with preload
· CSP with nonce
· X-Content-Type-Options
· Referrer-Policy
· security.txt
The cyberside.pl lab shows a public preview without active attack.