Bug#832920: HSTS

Julien Cristau <[email protected]>
Newsgroups gmane.linux.debian.devel.www
Message-ID <20160729164457.GA22628__14374.913290567$1469810906$gmane$org@betterave.cristau.org> 
On Fri, Jul 29, 2016 at 11:54:45 -0400, Hanno Böck wrote:

> Please also add an HSTS header to enforce future connections to be
> HTTPS and avoid SSL Stripping attacks.

Can't add something that's already there.
$ HEAD https://www.debian.org/ | grep Strict
Strict-Transport-Security: max-age=15552000

Cheers,
Julien
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.