3 ms·
In the second part of that sentence: > if you are listening on port 80 You don’t have to accept trafic on the http port for HSTS preloading. But iff you do yo
by bjpbakker 8y ago
In the second part of that sentence:
> if you are listening on port 80
You don’t have to accept trafic on the http port for HSTS preloading. But iff you do you must redirect it.
This rule makes sense; at least you should never serve content over http.
- gjs278 8y agonot everyone's browser has that list. if you turn off port 80, at no point will the browser that doesn't have this list be able to connect to your website.
- bjpbakker 8y agoExcept for Opera Mini and UC (Android), all modern browsers do. That’s over 85% of global usage. [0] [0] https://caniuse.com/#feat=stricttransportsecurity https://caniuse.com/#feat=stricttransportsecurity
- gjs278 8y agohttps://www.reddit.com/r/AskNetsec/comments/6mo4lt/how_long_to_get_onto_the_hsts_preload_list/ https://www.reddit.com/r/AskNetsec/comments/6mo4lt/how_long_... checkmate