24Horas

Perfect Jose! Thanks so much for the quick support!

• This reply was modified 2 years, 5 months ago by 24Horas.

Hi, I came back to give feedback.

The issue was resolved and was linked to Cloudflare. Solved it after I changed SSL to strict. I also followed the steps of adding HSTS via cloudflare, and revised my firewall rules.

Finally, headers were missing. Then I activated the plugin and everything worked perfectly. Score from D to A+.

Thanks for your answer Andrea!

I believe it is. I've been talking to my hosting server for a few days to understand why htaccess is not passing the headers.

I disabled Nginx for testing and put Cloudflare in "development mode" but still no success.

It is also important to say that cloudflare is configured at the server level. I'm a layman to understand how this affects security headers, and how I can fix it.

On the securityheaders.com page I see something mentioning "server: cloudflare" in the Raw Headers tab.

That makes sense? What do I need to do in cloudflare to get around the problem? htaccess is perfectly configured.