Operations and security
What a website needs after launch to keep running and stay secure.
Articles
Everything I have written on operations and security.
-
Backups that work
Present, complete, tested — and a copy off site.
Read the article on backups -
What happens before someone clicks “Accept”
The interesting moment on a website is the one between opening the page and clicking the cookie notice.
Read the article “What happens before someone clicks “Accept”” -
Domain and email
Under every website lies a domain, and on that domain hang records that have nothing to do with the website — but a great deal to do with whether your emails…
Read the article “Domain and email” -
Third-party code on your site
On an average website a whole lot of code runs that does not come from there.
Read the article “Third-party code on your site” -
Mandatory pages
Four pages that German law requires or expects of most business websites: the imprint (Impressum), the privacy policy, the accessibility statement and …
Read the article “Mandatory pages” -
Security headers and HTTPS
Which headers protect your visitors and in which order to set them safely.
Read the article on security headers -
Updates and staging
Why updates cannot wait and how to roll them out safely through a staging site.
Read the article on updates and staging -
Why the message from your contact form never arrives
The form says “Thank you, your message has been sent.” There is nothing in the inbox.
Read the article “Why the message from your contact form never arrives” -
Why mail lands in spam
Which three records on your domain decide whether your mail gets delivered.
Read the article on email delivery -
WordPress
A freshly installed WordPress website provides a range of addresses anyone can open without logging in.
Read the article “WordPress” -
Too many plugins
Why every unneeded plugin costs loading time, security and maintenance, and how to clear out the list.
Read the article on too many plugins