Timeline for Do I need a wildcard SSL certificate for inclusion in the HSTS preload list?
Current License: CC BY-SA 3.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Oct 28, 2014 at 0:05 | comment | added | dhaupin | @KevinBurke Notes: Also make sure your HSTS cache is 180+ days to pass Quelys/PCI and that any SSL you procure is RSA2(56). If you ever decide to not preload subs, set a cache of 0 for a week or 2 to clear clients before removing preload flag. | |
| Oct 27, 2014 at 23:53 | comment | added | dhaupin | @KevinBurke That is correct brotha. Its like parent to child relationship bubbling out from TLD. Im not sure if sub.sub.example would require TLD SSL though (I've never had to HSTS a sub on a sub). I'm assuming it would since its a policy based on "root" domain authority/scope. | |
| Oct 27, 2014 at 22:07 | comment | added | Kevin Burke | So, to be clear, I couldn't submit sub.example.com if example.com didn't validate with SSL. | |
| Oct 27, 2014 at 13:16 | history | answered | dhaupin | CC BY-SA 3.0 |