Should SECURE_HSTS_PRELOAD be false during HSTS testing?
#5959
Unanswered
GliderGeek
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
hi there, forgive me if this is the wrong place to ask this question, but here goes:
in the production settings file the following advice is given on the default value of
SECURE_HSTS_SECONDS=60:However it also sets the value for
SECURE_HSTS_PRELOADto be default onTrueDoes this work? I get the feeling from mdn docs, that this this combination does not work
I personally would:
SECURE_HSTS_SECONDS = 60+SECURE_HSTS_PRELOAD=FalseSECURE_HSTS_SECONDS=518400+SECURE_HSTS_PRELOAD=TrueDoes this make sense? I'm new to this so careful when doing something different than proposed
Beta Was this translation helpful? Give feedback.
All reactions