Guides on web server security: Many blogs and recommendations are only about configuring TLS. Some blogs even tell you to check their military-grade security by using some online assessment tools that – again – mostly check TLS only.
However, you not only need some encryption for data in transit., but also server monitoring, some processes, a basic concept, and more.
Check our series: https://infosec-handbook.eu/blog/wss0-how-to-start/
mastodon.at is a microblogging site that federates with most instances on the Fediverse.