@Shamrock
If this
is the only objective (people visiting), then you do not need to think about NCSC or go to internet-dot-nl (vague site, by the way).
If "visiting" is defined as "making your website accessible to modern browsers", then TLS 1.3 with a very strict cipher suite will always...