Welcome to the Q&A Forum

Rand,

I'm in the midst of a conversation with web security folks who state that a sub-directory (e.g. website/blog) that points to a blog like WordPress via a reverse proxy bypasses the "same-origin policy" and puts the site at "high risk".

If we take the standard security "hardening" measures like quality managed hosting with blog files kept separate from customer information, regular updates, trusted themes, vetted plugins, backups, etc., shouldn't we mitigate that risk?

We are set to relaunch our site on wordpress and will be creating a traditional blog section in the process. With doing so, we want to allow commenting on our blog; however, we are trying to find the best to accomplish our main goals of 1) increasing SEO and 2) creating a conversation hub that will refresh on page content

I have looked toward the Facebook comment plugin; however, it doesnt add to the pages code (essentially seems that all comment posts are hidden in javascript). This does little to accomplish our goal of refreshing page content, but it does allow users an easy and seamless way to add to the conversation is a useful tool to get a mention on social channels.

The thing we do like about more traditional plugins is 1) the ability to post the comment to the html so we can increase the refresh rate of page content and 2) ability to block IPs since we will likely allow comments to be open instead of requiring approval first (we want ppl to add to the conversation in real time to motivate more back and forth)

so, with all that said, just looking to get opinions on the best comment plugins available to achieve our main goals of increasing our content SEO and refreshing page content by allowing seamless, user friendly commenting features.