5 ms·
At http://commando.io http://commando.io we implement HSTS in the nginx server block: # Enable Strict-Transport-Security for one year add_header Strict
by nodesocket 14y ago
At http://commando.io http://commando.io we implement HSTS in the nginx server block:
# Enable Strict-Transport-Security for one year
add_header Strict-Transport-Security max-age=31556926;
- Kudos 14y agohttps://commando.io/ https://commando.io/ serves up your PHPMyAdmin. Edit: also, because of HSTS I can only visit your "secure" site and can no longer get to your marketing page to see what it is you do.
- nodesocket 14y agoGood catch, fixing that now.
- Kudos 14y agoI'll just wait a year for the cached HSTS flag to expire ;)
- nodesocket 14y agoShould be good now. Just working on a solution for GitHub buttons not supported over SSL.