No problem! I’ll do a quick summary!
SSL - This is the lock icon in your browser. It means information is encrypted between you and your server, and helps keep people from snooping. You have to get a certificate (but it’s free these days) and get your host to help you set it up.
HSTS - This is a header you can add to your site that tells browsers, “everything from here should be encrypted.” It helps privacy by keeping things like cookies from leaking to third parties.
https://developer.mozilla.org/en-US/doc ... t_SecurityX-Frame-Options - This is another header that tells the browser never to put your site in a frame. It helps prevent some cross-site-scripting attacks, clickjacking, and all sort of other fun stuff. There might be a button for this in phpBB already.
https://developer.mozilla.org/en-US/doc ... me-OptionsNone of this stuff is critical, at all. But if you’ve been paying attention to the stuff advertisers and ISP and governments have been doing to snoop on you online, it feels like we should make an effort. Especially considering the personal nature of the content here.
Cheers
