Preloading Strict Transport Security (HSTS)

Question

I configured my webserver to use Strict Transport Security (HSTS).
I more or less used a configuration as in this manual.
But I get the following in my SSL-report if I run a test on Qualys SSL LABS:

Why is the report stating that it won't do HSTS Preloading for those browsers:

Not in: Chrome Edge Firefox IE Tor

How can I change this? I saw this for another website, so it should be possible:

See hstspreload.appspot.com
– Federico Sierra
Commented Feb 2, 2016 at 16:15 — Federico Sierra, Commented Feb 2, 2016 at 16:15

Federico Sierra · Accepted Answer · 2016-02-02 16:35:55Z

5

HSTS preload is a list of sites that are hard coded into Chrome, Firefox, Safari, IE 11 and Edge as being HTTPS only.

You can include a domain in to the HSTS preload list in https://hstspreload.appspot.com/

see more:

answered Feb 2, 2016 at 16:35

Federico Sierra

3,6491 gold badge21 silver badges27 bronze badges

3

For others: be aware that this process is not easily undo-able!
– Wilt
Commented Feb 2, 2016 at 16:52

Add a comment |

1 Answer 1