WordPress Authentication Keys

Friday, March 12th, 2010 at 8:48 pm

Is there a program that will scan my wordpress site and ensure that SSL is structured properly?

First, Yes, I have a certificate SSL is a dedicated IP address. Ok, I changed manually every internal and external link on my WordPress site and have "Wordpress HTTPS" plugin ..... Although each time I go to my site still has the https (red cross) and the error is ... "Connecting to www.mysite.com is encrypted with 256-bit encryption. No However, this page includes other resources that are not safe. These resources can be viewed by others while in transit, and may be modified by an attacker to change behavior of the page. The connection uses TLS 1.0 connection is encrypted with AES_256_CBC with SHA1 authentication messages to and fro as DHE_RSA key exchange mechanism. The connection is compressed with DEFLATE. "Does this mean that I have malware? Or am I just not set this thing right? If so, Is there a program that will scan my site / wordpress and tell me what the SSL configuration errors are so I can fix it?

It is likely that your browser is showing assets arising not only from the first part of the domain (the site), but also shows the active third ... derivatives of 3 parts. These are usually advertising. A few steps to verify the implementation of SSL: Internet Explorer: Tools> Internet Options> Privacy> Advanced: here of "Override automatic cookie ....';" Allow Session", "Allow cookies first 'and' Block Third Party Cookies. "Is not very good at controlling these assets. Firefox: Tools> Options> Privacy> set top drop menu to" Firefox Use custom settings ..."> Check 'Accept cookies from sites "and uncheck the box ►" Accept third party cookies " and in Tools> Options> Security> Warnings title> Settings button: show off part of both encrypted and unencrypted-> OK out. Firefox also get "HTTPS everywhere" and "Force TLS": NOTE: These add-on to be used with "NoScript" and third party cookies turned off. In addition, TLS 2.0 is the latest version, but your browser is enabled to determine TLS 1.0, if we stick to that. Who is in the browser settings in the 'Advanced' area.

WordPress Tip: Making Your WP-CONFIG File Secure