[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#832920: HSTS

On Fri, Jul 29, 2016 at 11:54:45 -0400, Hanno Böck wrote:

> Please also add an HSTS header to enforce future connections to be
> HTTPS and avoid SSL Stripping attacks.

Can't add something that's already there.
$ HEAD https://www.debian.org/ | grep Strict
Strict-Transport-Security: max-age=15552000


Reply to: