From 780b4219d3f393e0117294c5d5799ca4b2d9d471 Mon Sep 17 00:00:00 2001 From: justin Date: Sat, 6 Jun 2026 00:27:02 -0500 Subject: [PATCH] feat(site): stage TrustedSite trustmark slot (opt-in prop) + setup doc; CSP/verification steps pre-documented --- docs/trustedsite-setup.md | 41 ++++++++++++++++++++++++++++ site/src/components/TrustStrip.astro | 16 ++++++++++- 2 files changed, 56 insertions(+), 1 deletion(-) create mode 100644 docs/trustedsite-setup.md diff --git a/docs/trustedsite-setup.md b/docs/trustedsite-setup.md new file mode 100644 index 0000000..997429f --- /dev/null +++ b/docs/trustedsite-setup.md @@ -0,0 +1,41 @@ +# TrustedSite (Certified Secure) trustmark — setup steps + +TrustedSite (formerly McAfee SECURE) gives a free, embeddable "Certified Secure" +trustmark after a daily malware/blocklist scan. The signup is an interactive +SaaS onboarding (email + account + ToS) that must be done by a human; everything +else is pre-staged here so finishing is ~2 minutes. + +## What's already staged +1. **Trustmark mount point** in `site/src/components/TrustStrip.astro` — a + commented `` slot + an opt-in `trustedsite` prop. +2. **Verification-file location**: drop their `.html`/`.txt` verification file in + `site/public/` (served at the web root verbatim by Astro). +3. This doc. + +## Steps for Justin +1. Go to https://www.trustedsite.com/ → "Get Started" (free Certified Secure + tier). Sign up with `security@performancewest.net` (or your preferred inbox). +2. Add site `performancewest.net`. Verify ownership — they offer either: + - **Meta tag**: copy the `` → + paste into `site/src/layouts/Base.astro` `` (next to the other + `` tags around line 33), **or** + - **File upload**: download their verification file → put it in + `site/public/` and redeploy. (Astro copies public/ to the web root.) +3. After they finish the first scan (usually <24h) they give a **trustmark + snippet** (a small `