Storin t'Kel 2024-02-04 Server and Site tests version 0.91 Informative static page Below are some tests in regards to the settings of my server as well as the validity of the HTML and CSS used on this website. These are tests with the scores that I would like to see on every website and webserver, if only to tell your visitors that you care about them, that you care about yourself and that you want to set an example to the world. Not caring about these scores is basically not taking the internet seriously, not taking your own content seriously and you are there only for the money. So in the end you should always demand from your host to have many settings by default, without having to pay for them. And then it is up to you to work on your .HTACCESS file to ensure that your visitor has a safe, secure and happy visit to your website. Note: Using nearly any CMS, SEO Script or API will prevent you from reaching high scores and taking your visitors serious. The same goes for those websites offering free hosting, like Neocities. The best practice is to get your own domain and your own host provider. ------------------------------------------------------------------------ Title : W3C HTML Validator URL : https://validator.w3.org/ Description: This is the HTML validator from the W3C organization that brings us the standards in terms of the HTML code, ranging from XHTML 1.0 Strict to HTML 5! If you are serious about your HTML code and proper implementation of it, then check your website using their validator. ------------------------------------------------------------------------ Title : W3C CSS Validator URL : https://jigsaw.w3.org/css-validator/ Description: This is the CSS validator from the W3C organization that brings us the standards in terms of CSS coding, ranging from CSS Level 1 to CSS Level 3. Same as above, if you are serious about your CSS code and proper implementation of it, then check your website using their validator. ------------------------------------------------------------------------ Title : W3C RSS Validator URL : https://validator.w3.org/feed/ Description: Now this is a recent discovery as I never really bothered with RSS feeds in the past. Having said this, during the remake of this website I decided to investigate many aspects further. I realized that my site should have an RSS file. So the best way to approach this is to use the RSS Validator in order to ensure the RSS feed to adhere to the standards. ------------------------------------------------------------------------ Title : The MDN Observatory URL : https://observatory.mozilla.org/analyze/www.storin.nl Description: This is the Mozilla Developer Network Observatory, which runs several checks to see if you have implemented several aspects of your server and .HTACCESS file well. It checks whether you have HTTPS enabled, whether your CSP settings are correct, whether you have the (now defunct) X-XSS enabled or disabled and much more. To me their score has always been a benchmark. I have an A+ as of the moment of this writing and I see it as a sport, a goal, to have the highest score possible. ------------------------------------------------------------------------ Title : Internet.nl Checks URL : https://internet.nl/site/www.storin.nl/2792995/ URL : https://internet.nl/mail/storin.nl/1141590/ Description: This is a site developed by the Dutch government and the Dutch IT community, those who are serious I should add, running many checks on your server, similarly to the MDN Observatory actually, but they go beyond this. They offer solutions in Dutch and English to the issues they may have discovered and it goes all the way to the security.txt file. On this site it is also possible to check your email connection. That's where this site scores a 97% rather than a 100% perfect score. For me it has to do with me having a Let's Encrypt certificate being prolonged every three months, meaning I'd have to reactivate DANE at that time as well. Perhaps I should buy a permanent certificate instead to reach the 100% score. ------------------------------------------------------------------------ Title : Security Headers URL : https://securityheaders.com/?q=storin.nl&followRedirects=on Description: This website, created by Scott Helme originally, solely checks on your security headers, like the CSP stuff. To me this was also, together with the MDN Observatory, an original benchmark. Reaching an A+ means you have done a good job in your settings! ------------------------------------------------------------------------ Title : HTST Preload URL : https://hstspreload.org/?domain=https://www.storin.nl Description: This site checks to see if you are eligible to be in the list of HTST Preloads, hard-coded in several browsers, though it began with Chrome but now also includes other browsers such as Firefox. The aim is to ensure that the sites eligible to be preloaded are a declaration of being loaded over a secure connection, HTTPS. ------------------------------------------------------------------------ Title : Crypt Check URL : https://cryptcheck.fr/tls/storin.nl:443 URL : https://cryptcheck.fr/https/storin.nl URL : https://cryptcheck.fr/smtp/storin.nl Description: This site checks various protocols; TLS, HTTPS, SMTP, on whether they are encrypted enough. To me the A+ applies on the three protocols with relative ease. There are more tests, such as a XMPP scan and others. I don't have my own XMPP server and therefore it isn't checked and added to this list. ------------------------------------------------------------------------ Title : Qualys SSL Checks URL : https://www.ssllabs.com/ssltest/analyze.html?d=www.storin.nl Description: This site checks your SSL connections, showing how well the Secure Sockets Layer protocol has been implemented on your server. Getting high grades is only possible if your host takes you seriously. ------------------------------------------------------------------------