Should SECURE_HSTS_PRELOAD be false
during HSTS testing?
#5959
Unanswered
GliderGeek
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
hi there, forgive me if this is the wrong place to ask this question, but here goes:
in the production settings file the following advice is given on the default value of
SECURE_HSTS_SECONDS=60
:However it also sets the value for
SECURE_HSTS_PRELOAD
to be default onTrue
Does this work? I get the feeling from mdn docs, that this this combination does not work
I personally would:
SECURE_HSTS_SECONDS = 60
+SECURE_HSTS_PRELOAD=False
SECURE_HSTS_SECONDS=518400
+SECURE_HSTS_PRELOAD=True
Does this make sense? I'm new to this so careful when doing something different than proposed
Beta Was this translation helpful? Give feedback.
All reactions