2

I configured my webserver to use Strict Transport Security (HSTS).
I more or less used a configuration as in this manual.
But I get the following in my SSL-report if I run a test on Qualys SSL LABS:

enter image description here

Why is the report stating that it won't do HSTS Preloading for those browsers:

Not in: Chrome Edge Firefox IE Tor

How can I change this? I saw this for another website, so it should be possible:

enter image description here

1

1 Answer 1

5

HSTS preload is a list of sites that are hard coded into Chrome, Firefox, Safari, IE 11 and Edge as being HTTPS only.

You can include a domain in to the HSTS preload list in https://hstspreload.appspot.com/

see more:

Preloading HSTS Firefox
HTTP Strict Transport Security comes to Internet Explorer 11 on Windows 8.1 and Windows 7

1
  • 3
    For others: be aware that this process is not easily undo-able!
    – Wilt
    Feb 2, 2016 at 16:52

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .