Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [hsts]

HTTP Strict Transport Security is a security feature that lets a web site tell browsers that it should only be communicated with using HTTPS, instead of using HTTP.

5 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
2 votes
0 answers
20 views

Deploy HSTS including subdomains if main domain is www (no preloading yet)

I want to deploy HSTS for *.example.com but we don't have web content on example.com. Instead, www.example.com is our main site and we have hundreds of (partly unknown) subdomains, so we don't want to ...
xsrf's user avatar
  • 226
2 votes
0 answers
421 views

CloudFlare and Avast strict transport

This weekend, we started using CloudFlare*. One of our users is reporting that Avast, the anti-virus software, has blocked our site due to a certificate error. Presumably this is because our ...
DMCoding's user avatar
  • 161
1 vote
0 answers
161 views

HSTS and redirecting to www. sub domain

I am trying to setup HSTS for my website but running into some problems regarding the response headers and the use of a sub domain. What I would like is for all HTTP traffic to redirect to https://www....
Ross Hodgman's user avatar
1 vote
0 answers
200 views

How long does Chrome take for HSTS preload list inclusion?

Assuming that my domain meets the inclusion requirements, and I successfully submit it to hstspreload.org, then: How long does it take on average until Chrome comes out with a new stable release with ...
Maximillian Laumeister's user avatar
0 votes
0 answers
52 views

Does the SSL certificate has to be valid for the www subdomain

The .htaccess successfully diverts all variants to @@@@.software on the browsers. And I have appropriate CSP headers (that work on all other sites in different installations) installed in htaccess. I ...
Rohit Gupta's user avatar
  • 2,487