Internet.nl checklist: score 100% with your website and email

This article applies to websites and email in a hosting package at WebOké.

On internet.nl you can test whether your website and email use modern security standards. With us you can score 100% if you follow the steps below.

Testing your website

1. IPv6: you usually don't need to do anything for this. All domains have an IPv6 address by default. If it's missing, check whether the AAAA records in the DNS are still correct. Read IPv6 at WebOké.
2. DNSSEC: you enable this yourself under My Domains in My WebOké, on the DNSSEC/DANE tab. Read Activating DNSSEC.
3. HTTPS: install an SSL certificate on your website. Read Activating an SSL certificate.
   • Redirecting to https: read Forcing visitors to https.
   • HSTS: is enabled by default on most of our servers for every website with https, with a max-age of one year. If the test says HSTS is missing for your site, enable it yourself. Read HSTS and security headers for your website.
4. Security options: internet.nl also checks headers such as X-Content-Type-Options, X-Frame-Options or frame-ancestors and Referrer-Policy. You set these yourself in your .htaccess. You can read how to do that in HSTS and security headers for your website.

Testing your email

1. IPv6 and DNSSEC: see above.
2. SPF: is set up correctly by default. If in doubt, read How does the SPF record work?
3. DKIM: is enabled by default in DirectAdmin.
4. DMARC: check whether there is a DMARC record. Read Creating a DMARC record and What is DMARC?
5. DANE: you enable this in the same place as DNSSEC, with the Activate DANE button. This is possible if your mail runs through WebOké, DNSSEC is enabled and there is a Let's Encrypt certificate for your domain, www and mail. After that, we keep the DANE records up to date for you.

See also in the DirectAdmin manual: Always redirect visitors to https and Setting up DMARC.

See also in the WebOké manual: DNSSEC and DANE.

Detailed explanation with screenshots: Requesting a free Let's Encrypt certificate in the DirectAdmin manual.