My website has SSL connection enabled in .htaccess in /web dir but I'm still not sure, if declaring SSL type connection directly in :root .htaccess would help my site be more secure. Of course my main content sits in /web/ directory, but still. Other than that /sub/ and logs are there in :root. What is better practice - global settings in root or directly in affected folder. Thank you for your advice.