Timeline for How do I get my site verified such that it shows a green box in Chrome's address bar?
Current License: CC BY-SA 3.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Sep 28, 2016 at 12:32 | comment | added | Num Lock | @GroundZero Yes, you should use HSTS. But I don't see how this adds to the scope of the question. HSTS is not related to EV. The question is about EV specifically. You might as well mention preloading of HSTS then. Or OCSP stapling. Or key pinning. Or this or that, as well. And there is so much more you need to do right than just setting a couple of headers. | |
| Sep 27, 2016 at 13:52 | comment | added | BlueCacti | Once you start with HTTPS, you should use an HSTS header so that clients using your (insecure) HTTP site will automatically start using the HTTPS version. There's a nice site that'll show which headers you are missing or have incorrectly configured: securityheaders.io | |
| Sep 26, 2016 at 12:50 | comment | added | user | And if it's really important, you should set up HSTS along with HTTPS. | |
| Sep 26, 2016 at 0:44 | history | answered | Stephen Ostermiller♦ | CC BY-SA 3.0 |