{"id":46976,"date":"2021-04-12T04:48:56","date_gmt":"2021-04-12T04:48:56","guid":{"rendered":"https:\/\/www.techwebspace.com\/?p=46976"},"modified":"2021-05-03T13:39:56","modified_gmt":"2021-05-03T13:39:56","slug":"how-web-hosting-affects-security","status":"publish","type":"post","link":"https:\/\/www.techwebspace.com\/how-web-hosting-affects-security\/","title":{"rendered":"How Web Hosting Affects Security"},"content":{"rendered":"\n

Website security is an often discussed topic, but not one that seems to be of especial concern for the owners of smaller sites. This is a problem since malicious actors today target everything from high-value websites to personal blogs.<\/p>\n\n\n\n

There are many moving parts in website operations – each of which can be hardened to improve on security. However, one segment sometimes overlooked is web hosting. From the measures taken by the host to the hosting plan chosen, each can have profound security implications.<\/p>\n\n\n\n

Hosting Plan Type Matters<\/h2>\n\n\n\n
\"Hacked
Hacked accounts can be turned into parts of a botnet, implicating other sites on shared hosting. (source: Cloudflare)<\/em><\/figcaption><\/figure>\n\n\n\n

Web hosting comes in a few core categories. The most accessible, easiest to manage, and cheapest are shared hosting plans. However, opting for shared hosting does have security implications for your website.<\/p>\n\n\n\n

Shared hosting plans often result in hundreds of user accounts crammed onto each physical server. Even if your site is all right security-wise, what happens to other accounts on the same server may implicate yours.<\/p>\n\n\n\n

For example, if a site gets hacked and taken control of, the attacker may use it as a point of attack towards other websites. Since shared hosting accounts typically also share IP addresses, your website IP may end up getting blocked or blacklisted as well.<\/p>\n\n\n\n

Although shared hosting is a good launching point for new website owners it generally isn\u2019t suitable for extended use. Once you\u2019ve become more familiar with websites and web hosting, consider moving towards a Virtual Private Server (VPS) plan instead.<\/p>\n\n\n\n

VPS plans come in siloed environments and will have dedicated resources – including your own IP address. <\/p>\n\n\n\n

Secure Socket Layer Certificate Availability<\/h2>\n\n\n\n
\"\"
cPanel has AutoSSL for easy SSL management, but not all hosts will enable this feature.<\/em><\/figcaption><\/figure>\n\n\n\n

One way of protecting your website and its visitors at the same time is by using a Secure Sockets Layer (SSL) certificate<\/a>. If you don\u2019t want to buy one, some service providers like Let\u2019s Encrypt offer them for free.<\/p>\n\n\n\n

Most web hosting providers today are very understanding of the need for SSL and will offer related supporting services. For example, they may include an easy SSL installation utility on your web hosting control panel.<\/p>\n\n\n\n

However, not all are so kind. While it may not be deliberate, some SSL providers seem to make the process to install free SSL certificates as difficult as possible. Likely, these are the ones who hope to force you to purchase a commercial SSL certificate from them.<\/p>\n\n\n\n

Before signing up with a web host, check on their SSL procedures to see if they offer installation and maintenance features.<\/p>\n\n\n\n

Email Affects Your Security Too<\/h2>\n\n\n\n

Almost all web hostings allow you to manage emails with your hosting plans. This is great since you won\u2019t need to fork out extra for email hosting. However, not all hosts extend the same level of security where email is concerned.<\/p>\n\n\n\n

Pay special attention to whether or not the hosting provider includes features for spam filtering<\/a>. These powerful but often neglected tools can help by monitoring all emails passing through your mail server.<\/p>\n\n\n\n

In extreme cases, attackers have been known to exploit loopholes in mail server applications as well.<\/p>\n\n\n\n

Integrated Content Delivery Network Features<\/h2>\n\n\n\n

Aside from letting you manage larger visitor volumes, Content Delivery Networks (CDNs) can mitigate some web attacks as well. For example, CDNs can not only prevent bot floods, but they also work to reduce the impact of Distributed Denial of Service (DDoS) attacks.<\/p>\n\n\n\n

While you can certainly sign up for and use any CDN you want, some web hosting companies help by having partnerships with CDN providers.<\/p>\n\n\n\n

In cases like these, you will find it much easier to use them compared to set everything up on your own. There are hosts that even go as far as to integrate CDN support on their web hosting control panels, giving you a single point of management for your site.<\/p>\n\n\n\n

Firewalls Also Help<\/h2>\n\n\n\n

Firewalls help increase website security, and they can be found in many areas. You can have multiple firewalls working together to provide more comprehensive protection. Yet few users actually pay attention to firewall capabilities on their web hosting server.<\/p>\n\n\n\n

Note what types of firewalls your potential web host has in place and ensure that they protect their infrastructure at multiple stages. Some web hosting service providers will even work with ace cybersecurity companies like Sucuri for better security.<\/p>\n\n\n\n

Ensure Disaster Recovery is at Hand<\/h2>\n\n\n\n

The best plans of mice and men can sometimes come to naught. This is the reason why you need a solid backup and restore system in place even with top security measures taken. While you can do this on your own, web hosting providers will often have some mechanism in place as well.<\/p>\n\n\n\n

The differentiating factor here lies in how comprehensive that system is. Some web shots may simply state that they carry out periodic backups. However, you need to ask yourself a couple of other things too. For example:<\/p>\n\n\n\n