Security headers add a new layer to SSL (Secure Socket Layer). Users of the WordPress plugin Really Simple SSL may see a recommendation on the Site Health page. Here's the fix.