5 ms·
That's a bad idea but here you go https://stackoverflow.com/questions/44650854/how-to-disable-chrome-hsts-permanently-for-a-subdomain#comment85342255_49130998 h
by therealmarv 9y ago
That's a bad idea but here you go https://stackoverflow.com/questions/44650854/how-to-disable-chrome-hsts-permanently-for-a-subdomain#comment85342255_49130998 https://stackoverflow.com/questions/44650854/how-to-disable-...
- simon_acca 9y agoWell, disabling HSTS is a badidea as long as the logical (or legal) entity creating the subdomain is the same one that enforces HSTS, which was the case up until this point, (in that being the same entity they know which subdomains need HSTS and which ones don't).
- icebraining 9y agoAnyone registering a .app domain knows it will have HSTS, so they feel it's appropriate for their site to use it.