Question

1

rated 0 times [ 1] [ 0] / answers: 1 / hits: 1928 / 2 Years ago, mon, december 13, 2021, 6:59:33

I could not find one topic on HSTS here on askubuntu.com yet so here it comes:

I want to setup HSTS so that my webserver will force the browsers to use HTTPS.

Does anyone know how to set this up for apache2 in a proper way?

Only authorized users can answer the question. Please sign in first, or register a free account.

Total Points: 253

Total Questions: 122

Total Answers: 94

Location: Botswana

Member since Sat, Jan 7, 2023

1 Year ago

answered 2 Years ago ticeate · Accepted Answer

It's really yout application that should be setting this imho, but you can use Header set to make apache do it:

Header set Strict-Transport-Security "max-age=31536000"