Is HSTS disabled for a reason? Can't set the Strict-Transport-Security header

397 views
Skip to first unread message

Kenneth

unread,
Apr 29, 2012, 3:56:13 AM4/29/12
to google-a...@googlegroups.com
I was playing around with this site: https://www.trustworthyinternet.org/ssl-pulse/ and noticed that my app engine site, (which gets an A, well done Google but I expect nothing less :-) wasn't listed as supporting HSTS when I thought it did.  So I investigated and found that my HSTS header which used to work doesn't work any more.  I have no idea when it stopped working, need to add it my test suite.


Issue entered:

http://code.google.com/p/googleappengine/issues/detail?id=7427 

thanks.
Reply all
Reply to author
Forward
0 new messages