Web Served: How to make your site all-HTTPS, all the time, for everyone Adding in SSL termination and HSTS compliance because it’s the right thing to do.

Add another layer of protection to your web presence. Create a CAA DNS record to specify which provider may issue certificates for your domain.