See [here](http://security.stackexchange.com/questions/142496/which-security-measures-make-sense-for-a-static-web-site).
See here.