Hi, I am a beginner in web security. My client would like to secure its Drupal site as best possible, using SSL encryption. Can someone provide a tutorial, guide, or instructions for a beginner setting up a secure Drupal site?

Normally I would just experiment, but when it comes to security I do not want to leave any holes!

Thanks.

Comments

1kenthomas’s picture

1kenthomas commented
Status: Active » Closed (fixed)

stanford,

There really is no need for a Tutorial that is Drupal-specific.

1) Set up SSL or other security/encryption for your site/URL, in Apache. See your certificate provider or Apache for documentation.

2) Enable Secure Pages and configure.

There, you're done :)