In recent years, Web site administrators have had to deal with threats that have such names as DROWN, BEAST, FREAK, and Heartbleed (also known as OpenSSL). The odds seem stacked against the honest people who make their content and products available to people on the Web.
As daunting as the challenges are for Web site security, Web administrators can significant reduce their exposure by using a standard set of practices: purchasing an SSL/TLS certificate, using secure source code, and persistently scanning …