Apache 配置 HSTS

1. vi /etc/httpd/conf/httpd.conf

2. Header always set Strict-Transport-Security "max-age=63072000; includeSubdomains; preload"

3.  systemctl restart httpd

IIS 配置 HSTS

Sites -> Site Name -> HTTP Response Header

 

Name: Strict-Transport-Security Value: max-age=31536000; includeSubDomains; preload

 

Host name: blank