4 ms·
HSTS preloading requires that you have the redirection on your site though, as per "Submission Requirements" on https://hstspreload.org/ https://hstspreload.org
by remram 4y ago
HSTS preloading requires that you have the redirection on your site though, as per "Submission Requirements" on https://hstspreload.org/ https://hstspreload.org/
- JoshTriplett 4y agoWhich is one of many good reasons why you should have that redirection enabled. Or disable HTTP entirely (the HSTS requirements say "if you are listening on port 80").
- toast0 4y agoFWIW, it doesn't require (or at least check) that you redirect for your whole site, just / on the apex domain. I've got a larger post elsewhere in the thread with detailed recommendations for how to use HSTS for modern browsers and let old browsers do http.