1194 results found

1. Firewall, Remote Adress(es): input a lot of remote adresses at once.

   In the Firewall settings, to input remote adress(es) to block or allow, it would be usefull, to input a lot of remote adresses, just to block or allow a whole company at once (after getting their adresses from ipinfo.io, for example).

   Actually I get spam, check remote IP (at dnslytics.com for example) and block that IP, if wanted.
   After getting a lot of these mails from IP adresses of the same company, I get the IP adresses from that company and block all the known IP ranges...one by one.
   That could be 100s or more and take too much time.
   So it would be nice, if I can block a bunch of IP adresses at once.

   In the Firewall settings, to input remote adress(es) to block or allow, it would be usefull, to input a lot of remote adresses, just to block or allow a whole company at once (after getting their adresses from ipinfo.io, for example).

   Actually I get spam, check remote IP (at dnslytics.com for example) and block that IP, if wanted.
   After getting a lot of these mails from IP adresses of the same company, I get the IP adresses from that company and block all the known IP ranges...one by one.
   That could be 100s or more and take too much… more

   2 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Security  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating
   open discussion  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

   This is a valid request, so we'll look into it. There is no ETA at the moment, but we would really appreciate you voting for this request so that we can accurately assess its popularity relative to other features.               

   
   

   Thanks in advance!

   
   

   --

   IG

2. Enable black/whitelists for mailgroups

   Mailgroups currently simply forward mail to all its members. When forwarding, spam rules do not apply. Hence the black/whitelist settings are also ignored.

   At least we should be able to only allow mailgroups to be used from internal accounts, so that mailgroups are not an easy target for spammers.

   1 vote

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Mail  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating
   open discussion  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

   Thank you for your input! We will consider this functionality in upcoming releases if it is popular. Everyone, please continue voting for this feature if you consider it important.

   —
   IG

3. Ability to set outgoing mail limit to specific domain (rate limit)

   The use case. Messages deffered to Yahoo when many messages sent:
   421 4.7.0 [TSS04] Messages from IP temporarily deferred due to user complaints

   Is it possible to add limit outgoing messages to specific service, for example:

   Sent no more than 100 mail to Yahoo per hour

   4 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  Mail  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating
   open discussion  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

   Thank you for your input! We will consider this functionality in upcoming releases if it will be popular. Everyone, please continue voting for this feature if you consider it important.
   —
   IG

4. Dedicated PHP FPM Handler - Chrooted Environment

   Actually, the fpm dedicated handler would be perfect for a native PHP FPM jail to get rid of open_basedir (cause of disabled realpath_cache).

   It would be great to get an option to enable "PHP Chrooted Mode" if dedicated handler is set.

   Benefits:
   * Native Chrooted FPM-Handler
   * Active Realpath Cache (open_basedir could be safely disabled)
   * Massive Performance Improvement for any PHP based web app
   * More security, because fpm handles the jail instead of php.ini

   ---

   Template / Config Changes:

   PHP-FPM Config

   Set "chroot" Option inside generated fpm pool config:
   /var/www/vhosts/system/<domain>/etc/php-fpm.conf

   chroot = /var/www/vhosts/<domain>/
   chdir = /
   

   Apache & NGINX:
   
/var/www/vhosts/system/<domain>/conf/nginx.conf

   Override /etc/nginx/fastcgi.conf SCRIPT_FILENAME setting to use the chrooted basepath instead of the full $document_root path.

   Example:
   
fastcgi_param SCRIPT_FILENAME /httpdocs$fastcgi_script_name;


   Would be a great feature for plesk in my opinion.

   Actually, the fpm dedicated handler would be perfect for a native PHP FPM jail to get rid of open_basedir (cause of disabled realpath_cache).

   It would be great to get an option to enable "PHP Chrooted Mode" if dedicated handler is set.

   Benefits:
   * Native Chrooted FPM-Handler
   * Active Realpath Cache (open_basedir could be safely disabled)
   * Massive Performance Improvement for any PHP based web app
   * More security, because fpm handles the jail instead of php.ini

   ---

   Template / Config Changes:

   PHP-FPM Config

   Set "chroot" Option inside generated fpm pool config:
   /var/www/vhosts/system/<domain>/etc/php-fpm.conf

   chroot = /var/www/vhosts/<domain>/
   chdir = /
   

   Apache & NGINX:… more

   5 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Web / PHP  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating
   open discussion  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

   This is a valid request, so we'll look into it. There is no ETA at the moment, but we would really appreciate you voting for this request so that we can accurately assess its popularity relative to other features.       

   
   

   Thanks in advance!       

   
   

   --

   IG

5. Search Console in DNS Domain

   Hi,
   i would like if i can search in my domain dns view for some records with a search field. I have mor then 60 DNS Records and its hard to find one ... filtering for dns record type and a search console would be perfect. Please implement it for a better UX in DNS Settings

   1 vote

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  DNS  ·  Delete…  ·  Admin →
   declined  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

   Thank you for your input!

   Unfortunately, we have to close your request, because over the years it has not become quite popular for further implementation.

   — AY

6. Enable "Compatible With" field in Worpress Theme and Plugin

   This is an important update without which you can not guarantee the installation of themes and plugins in compatible versions, causing rework.
   Each version of a plugin or theme is compatible with a range of versions of Wordpress and other plugins that are used together to provide the features declared by the developer of a given plugin or theme.
   At a first moment you can add the fields below in the "Upload Pugin" or "Upload Theme" screen:
   Wordpress Minimum Version
   Wordpress Maximum Version
   These values can be used in the "Install Wordpress" screen to validate the versions being used in the set, optionally.

   Themes or plugins usually declare a range of compatible versions of other plugins, such as WooCommerce combined with a payment plugin. This way you can create sets with versions of plugins and themes, compatible between them.

   This is an important update without which you can not guarantee the installation of themes and plugins in compatible versions, causing rework.
   Each version of a plugin or theme is compatible with a range of versions of Wordpress and other plugins that are used together to provide the features declared by the developer of a given plugin or theme.
   At a first moment you can add the fields below in the "Upload Pugin" or "Upload Theme" screen:
   Wordpress Minimum Version
   Wordpress Maximum Version
   These values can be used in the "Install Wordpress" screen to validate the versions being used in… more

   6 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   2 comments  ·  WP Toolkit  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating
   open discussion  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

   Thank you for your input. We will consider this functionality in upcoming releases, if it will be popular.
   Everyone, please continue voting for this feature if you consider it important.

   —
   IG

7. extend the domain list with the view if SSL is set.
   3 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Security  ·  Delete…  ·  Admin →
   declined  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

   Thank you for your input!
   Unfortunately, we have to close your request because it has not become quite popular for further implementation over the years.
   —
   IG

8. Allow an admin to setup custom installations of WordPress, Joomla, Concrete5, etc.

   I would like the ability to create custom installations of applications (WordPress, Joomla, Concrete5, etc.) so that we can have white-labeled versions of these apps that can contain custom settings, such as custom templates and pre-installed add-ons, that would allow us to offer a better experience for our end users.

   1 vote

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  Web Applications  ·  Delete…  ·  Admin →
   already available  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

   This ability is now available in WordPress Toolkit 2.4 and will be added to Joomla Toolkit later.

   —
   IG

9. separation of subscription locking and syncing with service plans

   Hello,

   currently any change done to subscriptions using customize will result in causing the subscription to lock and need resyncing. The only two buttons to save customizations are "apply and lock" and "update and lock".

   The change you make might affect just one area like the renewal date however the whole subscription is marked as locked. If you unlock and sync all customizations made through other areas of the subscription are removed, including custom php directives, php memory_limit, and other configuration settings that are important to keep so that the customer's subscription will keep their websites working.

   As it currently stands, after first modification of the renewal date for example we end up having all subscriptions locked and unsynced therefore we can't automate bulk changes in subscription plans like increasing HDD space, or mailbox limits.

   If we manually resync the subscriptions, we lose all customizations that are mission critical for the customers. So we either have to work through every subscription one by one adjusting or we have to work through every subscription and notice all specific directives that are important to the customer and then reimplement them after sync.

   That's tedious,time consuming and prone to errors.

   Simple example,
   1. create a service plan using 256MB as memorylimit for php and assign it to a subscription
   2. go to the subscription -> domain panel
   3. click on php settings icon
   4. add a php directive like memorylimit = 1G and save
   4a. Go to subscription and click on customize
   1. Change renewal date
   2. Hit update and lock
   3. Hit unlock and sync
   The result is the directive memory_limit =1G is lost.
   4b. Go to service plan and adjust mailboxes from e.g. 5 to 6
   1. Sync plan with subscriptions
   Result is the directive is lost.

   This effectively kills any versatility in the service plans for mass changes and is potentially dangerous for the customers as it can cause things to break.

   In my opinion at the very least each service plan tab as we define it

   Resource
   Permissions
   Hosting Parameters
   PHP Settings
   Applications

   should have a separate lock. That way when we change something in the PHP settings tab, only the php settings are marked as to need resyncing. When we change something in the resources, only resources will resync etc etc.

   This would still be prone to errors when editing php settings of course but at least not when you're adjusting resources.
   Ideally a list of all changes to each subscription if you decide to sync again should appear too and ask for confirmation. That way at least you can note what to fix after plesk breaks it.

   Hello,

   currently any change done to subscriptions using customize will result in causing the subscription to lock and need resyncing. The only two buttons to save customizations are "apply and lock" and "update and lock".

   The change you make might affect just one area like the renewal date however the whole subscription is marked as locked. If you unlock and sync all customizations made through other areas of the subscription are removed, including custom php directives, php memory_limit, and other configuration settings that are important to keep so that the customer's subscription will keep their websites working.

   As it currently… more

   1 vote

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Business Logic  ·  Delete…  ·  Admin →
   declined  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

   Thank you for your input!
   Unfortunately, we have to close your request, because over the years it has not become quite popular for further implementation.
   —
   IG

10. Ability to create custom MX records via DNS Templates with <domain> placeholder in the middle

    Ability to create custom MX records via DNS Templates with <domain> placeholder in the middle of the value.

    For example, currently, it is not possible to create a record via DNS Templates:
    <domain>. MX mx.<domain>.example.com

    It can be useful for setting up an external mail service with a hostname based on a domain name.

    6 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    3 comments  ·  DNS  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating
    open discussion  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

    Thank you for your input! We will consider this functionality in upcoming releases if it will be popular.
    —
    IG

11. Add permissions for ModSecurity like WordPress

    WordPress has permissions at the subscription and service plan level that allow controlling customer's access to it individually.

    There should be similar options for ModSecurity without having to disable all the hosting settings with the Hosting Management Settings permission.

    1 vote

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Plesk (general)  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating
    open discussion  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

    Thank you for your input! We will consider this functionality in upcoming releases if it will be popular.

    Everyone, please continue voting for this feature if you consider it important.

    —

    KvD

12. add switch to enable/disable "restart_apache_gracefully" option via admin ui

    By default, every time you modify hosting / apache / nginx or ssl settings for ANY websites, plesk will restart apache server and during that time ALL websites on the server are down returning "Connection time out" or "502 Bad Gateway" errors.

    Even if such changes are made by clients from their accounts, all websites will be down during the next restart.

    "restartapachegracefully" option will help to avoid this and tell apache to reload the config on the fly.

    it is not perfect, but it is still better than seeing 502 Bad gateway every n-th seconds on any website on the server.

    please add a switch on "Tools & Settings > Apache web server" page to enable/disable restartapachegracefully option. (we can do it manually from cli, but enabling it via admin interface would be more comfortable)

    By default, every time you modify hosting / apache / nginx or ssl settings for ANY websites, plesk will restart apache server and during that time ALL websites on the server are down returning "Connection time out" or "502 Bad Gateway" errors.

    Even if such changes are made by clients from their accounts, all websites will be down during the next restart.

    "restartapachegracefully" option will help to avoid this and tell apache to reload the config on the fly.

    it is not perfect, but it is still better than seeing 502 Bad gateway every n-th seconds on any… more

    1 vote

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Usability and UI  ·  Delete…  ·  Admin →
    completed  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

    Implemented in Plesk Onyx 17.9 Preview 7 – https://docs.plesk.com/release-notes/onyx/change-log/#contents-179-preview7

    The Plesk administrator can now select the type of Apache restart (graceful or normal) in “Tools & Settings” > “Apache Web Server” (under “General Settings”).

    —
    IG

13. Add notification for WP Toolkit regarding outdated PHP version

    Currently, it is possible to manage WordPress Toolkit notifications regarding detected vulnerabilities in Tools & Settings > Notifications menu. This way customers are aware of issues with the instance.
    However, customers are not being informed regarding the outdated PHP version in case PHP management is allowed for them. The info is only displayed in Plesk > WordPress > instance tab.

    2 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  WP Toolkit  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

14. Apply SELinux policy for custom vhosts directory

    Currently Plesk has predefined SELinux policies for default location of vhosts directory (/var/www/vhosts). If virtual hosts directory changed to custom one, it is needed to disable SELinux (set to permissive), for correct websites working capacity. It would be great to change transvhosts.pl script that policies for /var/www/vhosts will applies to custom vhost directory.

    6 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  Security  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating
    open discussion  ·  IgorG responded

    Thank you for your input. We will consider this functionality in upcoming releases if it is popular. Everyone, please continue voting for this feature if you consider it important.
    —
    IG

15. Forbid domains to use a PHP version already disabled

    When a PHP version is disabled, the subscription that already had that PHP version selected can still use that version while no other is selected. Even in the PHP settings in Plesk is possible see the old version, PHP info still working and displaying the disabled PHP version as well.

    Its required a feature to avoid that

    1 vote

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Web / PHP  ·  Delete…  ·  Admin →
    declined  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

    Thank you for your input!
    Unfortunately, we have to close your request because it has not become quite popular for further implementation over the years.
    —
    IG

16. Windows Server backup and Plesl configuration backup works as disaster recovery. As Plesk backup on very big backup is too slow.

    Windows Server backup (2008 onwards) + Plesk configuration backup works as disaster recovery. As Plesk backup on very big backup is too slow to backup, If possible where WSB + plesk configuration work for full server recovery and for single domain recovery including mailing SQL and component i.e. data comes from WSB and permission and settings comes from configuration .

    1 vote

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  Plesk (general)  ·  Delete…  ·  Admin →
    not a feature  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

    Can you please tell us what exactly your proposal is?

    Upd: We are closing this request, as no information was provided for over a month.

    —AK

17. Add an option to use a custom url to access MyLittleAdmin

    It's not always feasible to add the mssql.<domain.tld> DNS entry for the websites hosted in Plesk.

    Adding an option to configure a custom url/dns name to access the MyLittleAdmin tool with would be preferrable.

    And make sure that "MyLittleAdmin" button under Databases would take the user to the global url if it's set.

    7 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  Databases  ·  Delete…  ·  Admin →
    declined  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

    In the nearest future, we plan to stop shipping MyLittleAdmin with Plesk. This is because MyLittleAdmin is not in active development, and has  known security issues. Instead, Plesk will provide links to downloadable  clients and instructions on how to connect the client to the Plesk  server. This change is currently scheduled to take place with the release of Plesk Obsidian 18.0.53 (early June 2023).

    -- PD

18. Auto-renew Let's Encrypt certificate when domain is reactivated

    When a disabled domain with a Let's Encrypt certificate is re-activated in one of those situations, Plesk should be able to:

    Situation A: Domain is reactivated before reaching certificate's expiration date => Do nothing, and renew the certificate aproaching the set date in the cert itself

    Situation B: Domain is reactivated after reaching certificate's expiration date => Plesk should re-order or renew the expired certificate

    5 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Web / SSL  ·  Delete…  ·  Admin →
    already available  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

    When the "Keep website secured" option is checked in the SSLIt extension configuration page (where the other configuration parameters of the certificate are configured, too), an SSL certificate will be auto-renewed or auto-created when a previously deactivated domain becomes active again.

    -- PD

19. file manager

    1- For remove action in file manager, show number of selected file and folders and list of their name in warning dialog box.

    2- For upload action in file manager, set a checkbox near fileinput in uploading dialog for unzip the zip file directly.

    All these option was worked well in Plesk below 12; but now I can not find them.

    2 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Plesk (general)  ·  Delete…  ·  Admin →
    declined  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

    Thank you for your input!

    We can consider implementing the item 1 in file manager in upcoming releases.

    Concerning the item 2 – could you please clarify how you would expect this to work? Currently, in Plesk 12, you can extract files from an archive after uploading. To do this, select an archive, and then click More > Extract Files.

    Please use a separate post for each request.

    — ES

20. Conceptional failures of your SSL It! extension

    Your SSL It! plugin has some conceptional failures:

    1. You provide Mozillas Cipher Suites to adjust the three levels of Mozilla. I'm unsure, if you always then set the additional settings like nginx ssl session caching, but however, Mozillas Suites are not the best. Better is the rating table of Qualys SSL Labs, as that's the grade finally looking for. E.g. Mozillas most secure level requires EC certs, as you don't provide a way to order or install such certs with your normal SSL certificate dialogue (if don't want to order via Let's Encrypt or Encryption Everywhere program), so it's somehow useless. Also I won't see EC as such interesting as if quant computing will come, key length of a 384 bit EC is still 384 bit meanwhile a 4096 bit RSA is still 4096 bit and will not be first possible target.

    2. You provide OCSP setting, but I don't understand, why this setting should be done per domain. Why not enable at all for all sites or give possibility to choose?

    3. I'm unsure, how you handle alias domains, you recognize them, but will a certificate order (e.g. LE or EE) then will issue all separate certs or provide possibility to purchase one with all entries?

    4. HTTP to HTTPS redirection (if no cert available) still has its problems. If you have aliases, aliases will first redirect to https, so they need a cert just therefor (better to change the order of redirects) as well as you redirect from non-www to www first, if preferred domain is www, however, that's recognized as bad practice by HSTS preload list (would be fine to be linked to enter or check your site there) and could result in not been listed (so again wrong redirection order).

    5. As you also allow to protect webmail (however, you don't see, if it's protected already as in my situation), what's about MTA-STS support?

    Regards,
    Christian

    Your SSL It! plugin has some conceptional failures:

    1. You provide Mozillas Cipher Suites to adjust the three levels of Mozilla. I'm unsure, if you always then set the additional settings like nginx ssl session caching, but however, Mozillas Suites are not the best. Better is the rating table of Qualys SSL Labs, as that's the grade finally looking for. E.g. Mozillas most secure level requires EC certs, as you don't provide a way to order or install such certs with your normal SSL certificate dialogue (if don't want to order via Let's Encrypt or Encryption Everywhere program), so it's somehow… more

    3 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  Web / SSL  ·  Delete…  ·  Admin →
    not a feature  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

    If you believe you have found product issues, please open a ticket with Plesk support so that the issues can be addressed.

    -- PD