DNS & security
Add CAA in cPanel Without Breaking AutoSSL Renewal
Check authoritative DNS and your AutoSSL issuer before adding CAA in cPanel. Verify public records, wildcard policy and renewal logs without blind copying.
DNS & security
A closer look at dns & security, with useful answers and practical next steps.
26 articles
DNS & security
security.txt Setup: Publish and Verify a Working Report Channel
Create security.txt with a real reporting contact and expiry. Check the correct host, plain-text response and file contents, then keep the channel current.
DNS & security
Disable TLS 1.0 and 1.1: Verify the Edge and Origin Safely
An OpenSSL failure is not always proof that old TLS is disabled. Check the client, CDN edge and origin separately, then verify the application still works.
DNS & security
Enable HTTP/3 on Cloudflare: Verify QUIC Without Confusing Fallback
Cloudflare says HTTP/3 is on, but is the request really using it? Verify QUIC, interpret fallback and separate the visitor connection from the origin.
DNS & security
Add a Content-Security-Policy in Report-Only Mode, Safely
Test a CSP header on Apache without breaking your site: collect violation reports first, fix your policy, enforce later, and keep a one-step rollback ready.
DNS & security
Fix Reverse DNS (PTR) So Gmail Accepts Your Server's Mail
Running your own mail server? Gmail wants a PTR record that matches your A record. Learn to test it with dig, who can change it, and what to ask your host.
DNS & security
Host a Site From Home Safely With Cloudflare Tunnel
Publish an app from a home PC or small VPS with no open ports, lock a private tool behind an email PIN with Cloudflare Access and check the tunnel is Healthy.
DNS & security
Chrome HTTP warnings: audit your site in 15 minutes
Audit each hostname, certificate and redirect hop for working HTTPS. Google's Chrome default announcement supplies the context; check your installed browser's setting.
DNS & security
Lower Your DNS TTL Before a Hosting Move for a Fast Switch
Drop your DNS TTL to 300 seconds a full old-TTL period before you move hosts, and visitors reach the new server in minutes instead of hours or a whole day.