I’m making some changes to the hosting and configuration of this site, you can see the rough goals below:

• Changing hosting provider from a legacy shared server to a cloud hosting provider with better security and high availability.
• Adding stricter (and end-to-end) encryption to the entire site using a combination of CloudFlare and LetsEncrypt.
• Changing the sites security / performance configuration to support and enforce:
  • Content-Security-Policy
  • X-Frame-Options
  • X-XSS-Protection
  • X-Content-Type-Options
  • Strict-Transport-Security
  • HTTP Strict Transport Security (HSTS)
  • Authenticated Origin Pulls
  • HTTP/2 + SPDY
  • IPv6 Compatibility
  • Scrape Shield

Using various tools this should actually be quite straightforward. I plan to detail the main stages / steps in some later posts.