From 9324fde6598da0a0414c4c079d753c706c34520d Mon Sep 17 00:00:00 2001 From: Isaac Bennetch Date: Thu, 4 Feb 2016 19:40:42 -0500 Subject: [PATCH] Small language improvement about HSTS Signed-off-by: Isaac Bennetch --- doc/setup.rst | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/doc/setup.rst b/doc/setup.rst index 6368dffb80..9c79c15ac0 100644 --- a/doc/setup.rst +++ b/doc/setup.rst @@ -744,8 +744,8 @@ Securing your phpMyAdmin installation The phpMyAdmin team tries hard to make the application secure, however there are always ways to make your installation more secure: -* Serve phpMyAdmin on HTTPS only. Prefereably settings HSTS as well, so that - you're protected from downgrading attach. +* Serve phpMyAdmin on HTTPS only. Preferably, you should use HSTS as well, so that + you're protected from protocol downgrade attacks. * Remove the ``setup`` directory from phpMyAdmin, you will probably not use it after the initial setup. * Properly choose an authentication method - :ref:`cookie`