In addition to https://ssl-config.mozilla.org/ when setting up your website, there is another wonderful free tool by Mozilla: https://developer.mozilla.org/en-US/observatory Unlike the Mozilla configurator it’s not as succinct with helping you configure but it is very good nevertheless. A nice analysis is https://vaibhav.co.uk/2025/03/08/implementing-secure-headers-using-mozilla-observatory/ by Vaibhav Jain. So a leg up is to start here with this: Like …