Not all recommended security headers are installed

Website, Application, Performance Getting Started
1

can anyone provide steps how to correct this error on my word press sites? really simple ssl says its an ssl hosting issue.

SSL error:
Not all recommended security headers are installed
Your .htaccess file does not contain all recommended security headers.
HTTP Strict Transport Security
Content Security Policy: Upgrade Insecure Requests
X-XSS protection
X-Content Type Options
Referrer-Policy
Expect-CT

2

I believe Cloudflare adds Expect-CT to everything, and you can add HTTP Strict Transport Security (HSTS) from the Cloudflare dashboard (SSL/TLS -> Edge Certificates). The rest you have to do at your host in the .htaccess file as it says.

1 Like
3

thank you!

2 Likes
4

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.