https://potato.id/en/tags/https/ Recent content in HTTPS on Jonias Fortuna Hugo en Fri, 01 May 2026 23:58:00 +0700 https://potato.id/en/posts/security-headers-check-what-to-fix-first-on-your-website/ Fri, 01 May 2026 23:58:00 +0700 https://potato.id/en/posts/security-headers-check-what-to-fix-first-on-your-website/ <p>If you are running a <strong>security headers check</strong> with <a href="https://securityheaders.com/">SecurityHeaders.com</a>, the biggest mistake is trying to fix everything at once.</p> <p>A better approach is to review each <strong>HTTP Security Header</strong>, separate the easy wins from the risky changes and then fix the headers in the right order.</p> <p>For this draft, we use the sample SecurityHeaders.com report for this website.</p> <pre tabindex="0"><code>Site: https://potato.id/ IP Address: 172.67.219.34 Report Time: 22 Apr 2026 16:50:39 UTC Headers: - Referrer-Policy - Content-Security-Policy - X-Frame-Options - Strict-Transport-Security - X-Content-Type-Options - Permissions-Policy Warning: Grade capped at A, please see warnings below. </code></pre><p>The interesting part here is not just the grade. It is the warning. A site can already look &ldquo;good&rdquo; or A Grade in SecurityHeaders.com but still have a few settings that should be tightened first.</p>