[NSFW] Some members get error

  • Resolved central4all

    (@central4allgmailcom)


    3 years, 9 months ago

    Some mebers complain that with chrome they get error
    connection not being porivate and is wirtten you cant visit the domain because is using hsts

    The page I need help with: [log in to see the link]

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Author Andrea Ferro

    (@unicorn03)

    3 years, 9 months ago

    Hi @central4allgmailcom, thank you for downloading the Headers Security Advanced & HSTS WP plugin.

    I am ANDREA and I will help you with your issue encountered as quickly as possible.

    Can you confirm that you are experiencing the following error: cannot visit site right now because the website uses HSTS?

    You cannot visit the “site” right now because the website uses HSTS. The HTTP Strict-Transport-Security (HSTS) response header allows a site to tell browsers that they are accessible using HTTPS, instead of using HTTP.

    This is a fix:
    Open a new tab in the Chrome browser and go to chrome://net-internals/#hsts and type the URL you are trying to access into the field at the bottom, “Delete Domain Security Policy” and hit the Delete button, viola! You should now be able to access that URL again.

    (I ask for some information before using it):
    If you experience a different problem or the previous error, please send me a picture or the error you are experiencing so I can help you.

    Visiting your website with Chrome I don’t find any annomaly of the ones found (moreover vecdo that the plugin is active and the site was correctly sent to the HSTS preloader list of browsers).

    security header test completed: https://securityheaders.com/

    HSTS Preload test completed: https://hstspreload.org/

    Thread Starter central4all

    (@central4allgmailcom)

    3 years, 9 months ago

    https://prnt.sc/PSS-GTV6N_VA
    you cant visit domain because is using hsts
    error is cpming from smarphones chrome always

    the fix is not really fix, because i must know who is getting the error and contact with them. Most of the times the just go away and i am loosing traffic.

    BTW in another that i added it broke all site.

    Thread Starter central4all

    (@central4allgmailcom)

    3 years, 9 months ago

    is there way to completly remove hsts ? will this fix the error or it will remain in chrome?

    Plugin Author Andrea Ferro

    (@unicorn03)

    3 years, 9 months ago

    Hi, yes you can remove the site from the HSTS, by going to the following link you will be able to make a removal request.

    ***ATTENTION: IF YOU CLICK THE FOLLOWING LINK YOU WILL REMOVE YOUR WEBSITE FROM THE HSTS PRELOAD LIST ***
    https://hstspreload.org/removal/?domain=adultforum.gr

    Removal Requirements
    If a preloaded site sends a valid HSTS header without the preload directive, it is considered to be requesting removal from the preload list.

    In order to be removed from the HSTS preload list through this form, your site must demonstrate the removal request by satisfying the following set of requirements:


    Send a valid HSTS header.
    • The header must not contain the preload directive.

    Disabling HSTS (you have to edit the htaccess file)

    If you completely want to disable HSTS, you can send the following knockout entry:
    • Strict-Transport-Security: max-age=0

    • Header always set Strict-Transport-Security “max-age=0; includeSubDomains;”

    if you no longer want to use HSTS. The HSTS specification allows the site to send a header with the “max-age = 0” directive. This indicates that HSTS should not be applied for that host and the browser would respect it. The preload list must replicate this behavior.

    To accomplish this, we use the concept of “knockout” voices in our HSTS implementation. When the browser receives an HSTS header with “max-age = 0”, a knockout entry is stored that overwrites the corresponding entry in the preload list. The knockout entry essentially says, “We have no HSTS information on this host.” As a result, the browser behaves as if the host is not in the preload list. .

    • This reply was modified 3 years, 9 months ago by Yui.
    • This reply was modified 3 years, 9 months ago by Andrea Ferro.
Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘[NSFW] Some members get error’ is closed to new replies.