3 ms·
Good point, we already include HSTS in HTTP responses. Now I'm Thinking what will happen 365 days after we stop serving http..
by rafaelturk 6y ago
Good point, we already include HSTS in HTTP responses. Now I'm Thinking what will happen 365 days after we stop serving http..
- LinuxBender 6y agoTo be on the safe side, should consider getting your domain in the preload list [1]. AFAIK not all browsers will try http/443 if a person just types the domain name into the URL bar. Chrome does this. Firefox does not. Unsure about Edge. Your access logs on port 80 should help determine the risk. This is more important for sites that depend on radio/tv advertisement traffic. [1] - https://hstspreload.org/ https://hstspreload.org/