2

I configured my webserver to use Strict Transport Security (HSTS).
I more or less used a configuration as in this manual.
But I get the following in my SSL-report if I run a test on Qualys SSL LABS:

enter image description here

Why is the report stating that it won't do HSTS Preloading for those browsers:

Not in: Chrome Edge Firefox IE Tor

How can I change this? I saw this for another website, so it should be possible:

enter image description here

5

HSTS preload is a list of sites that are hard coded into Chrome, Firefox, Safari, IE 11 and Edge as being HTTPS only.

You can include a domain in to the HSTS preload list in https://hstspreload.appspot.com/

see more:

Preloading HSTS Firefox
HTTP Strict Transport Security comes to Internet Explorer 11 on Windows 8.1 and Windows 7

| improve this answer | |
  • 3
    For others: be aware that this process is not easily undo-able! – Wilt Feb 2 '16 at 16:52

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.