• Hi there,

    When i test the site on hstspreload.org a receive a warning:

    The HTTP page at http://xxxxxx.it sends an HSTS header. This has no effect over HTTP, and should be removed.

    Anything I can do to address the warning?

    Thank you very much

    Angelo

Viewing 1 replies (of 1 total)
  • Rimas

    (@erku)

    As a PHP developer, I’d rather keep this as is, for two reasons:

    1. Even if that header has no effect over HTTP, it doesn’t hurt either
    2. It’s not always easy to detect whether your website is actually served via HTTP or HTTPS (for example, when it’s served via a reverse proxy or load balancer).
Viewing 1 replies (of 1 total)

The topic ‘Warning – HSTS preload’ is closed to new replies.