HSTS in CWP

[itmonitor]

Hi! Not sure this is the right forum. Could anybody point me to instructions on how to setup HSTS in CWP?

Any advice is welcome.

Rgs

IM

[itmonitor]

Hi, please, any advice is welcome. Looking forward to your replies.

[Netino]

In Apache, add the following parameter in the VHOST site:

Code Select Expand


Header add Strict-Transport-Security "max-age=15768000"


or

Code Select Expand


Strict-Transport-Security: max-age=15768000; includeSubDomains


The max-age parameter sets the browser the validity period in seconds that HTTPS will be forced, in which case it will be 6 months. The "includeSubDomains" parameter indicates that this rule will apply to subdomains.

Regards,
Netino

[itmonitor]

Hi, thank you.