About Using HTTPS

For the best security, all websites should be running under HTTPS. You can do that with Let's Encrypt.

For projects with HTTPS also set these Django project settings to disable session and CSRF cookie access from JavaScript:

SESSION_COOKIE_SECURE = True
SESSION_COOKIE_HTTPONLY = True
CSRF_COOKIE_SECURE = True
CSRF_COOKIE_HTTPONLY = True

For Django-based SaaS projects.

Django App for You

For Django websites that use cookies.

Django App for You

Learn how to build practical web projects with Django 3.

It's not for everyone, but it might be for you!