2 ms·
Isn't set HSTS at the web application level rather than the SSL / TLS certificate registrar level ?
by LunaSea 11y ago
Isn't set HSTS at the web application level rather than the SSL / TLS certificate registrar level ?
- bjacobel 11y agoCorrect, HSTS is a header that is passed by nginx/Apache/whatever combined with a hard coded list shipped with your browser. You need SSL for HSTS to work, but the SSL vendor you choose doesn't have any bearing on being able to implement HSTS.