Home / server / Questions / 753482
Accepted
Wilt
Asked: 2016-02-03 06:53:42 +0800 CST

Preloading Strict Transport Security (HSTS)

  • 772

I configured my webserver to use Strict Transport Security (HSTS).
I more or less used a configuration as in this manual.
But I get the following in my SSL-report if I run a test on Qualys SSL LABS:

enter image description here

Why is the report stating that it won't do HSTS Preloading for those browsers:

Not in: Chrome Edge Firefox IE Tor

How can I change this? I saw this for another website, so it should be possible:

enter image description here

ssl

1 Answers

  1. Best Answer

    HSTS preload is a list of sites that are hard coded into Chrome, Firefox, Safari, IE 11 and Edge as being HTTPS only.

    You can include a domain in to the HSTS preload list in https://hstspreload.appspot.com/

    see more:

    Preloading HSTS Firefox
    HTTP Strict Transport Security comes to Internet Explorer 11 on Windows 8.1 and Windows 7

    • 5