[tor-bugs] #2613 [Website]: set strict transport security headers on our https websites

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Tue Feb 22 19:21:46 UTC 2011


#2613: set strict transport security headers on our https websites
------------------------+---------------------------------------------------
 Reporter:  phobos      |          Owner:  phobos
     Type:  task        |         Status:  new   
 Priority:  normal      |      Milestone:        
Component:  Website     |        Version:        
 Keywords:  sts, https  |         Parent:        
   Points:              |   Actualpoints:        
------------------------+---------------------------------------------------
 Add
 # Add six month HSTS header for all users...
 Header add Strict-Transport-Security "max-age=15768000"

 to our https webservers.  a2enmod headers is needed for this as well.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2613>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list