WordPress/Security-White-Paper

Add section covering HTTPS

johnbillion opened this issue 8 years ago · 0 comments

johnbillion commented 8 years ago

There should be a section covering HTTPS which includes the following:

WordPress only recommends hosts that provides an HTTPS certificate by default.
Core's use of the secure flag on cookies when using HTTPS.
Enforcement of administration over HTTPS via the FORCE_SSL_ADMIN constant.

Anything else?