The remote web server is not enforcing HSTS, as defined by RFC 6797. This can be achieved by adding the following configuration to NGINX:
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
More information from NGINX.
The remote web server is not enforcing HSTS, as defined by RFC 6797. This can be achieved by adding the following configuration to NGINX:
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
More information from NGINX.
Comments
0 comments
Please sign in to leave a comment.