3 ms·
strict-transport-security:max-age=2592000; includeSubDomains It has a maximum age, not an expiration date. If I visit gmail today, that STS header will expire
by bonzoesc 14y ago
strict-transport-security:max-age=2592000; includeSubDomains
It has a maximum age, not an expiration date. If I visit gmail today, that STS header will expire a month from now[1].
If I visit again tomorrow, the browser-cached version of that header will be updated with a new expiration date, and expire a month from tomorrow, not now.
1: http://www.wolframalpha.com/input/?i=2592000%20seconds http://www.wolframalpha.com/input/?i=2592000%20seconds
edit: I think we're agreeing.