3 ms·
Well, disabling HSTS is a badidea as long as the logical (or legal) entity creating the subdomain is the same one that enforces HSTS, which was the case up unti
by simon_acca 8y ago
Well, disabling HSTS is a badidea as long as the logical (or legal) entity creating the subdomain is the same one that enforces HSTS, which was the case up until this point, (in that being the same entity they know which subdomains need HSTS and which ones don't).
- icebraining 8y agoAnyone registering a .app domain knows it will have HSTS, so they feel it's appropriate for their site to use it.