[ https://issues.apache.org/jira/browse/SOLR-15578?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17552424#comment-17552424 ]
Jan Høydahl commented on SOLR-15578: ------------------------------------ Or rather add a parameter to turn the header on, which gives them a way to stop nagging from incompetent security dept :) Or just document how to edit jetty https xml to add it in manually? > Add Support for HSTS Security Protocol > -------------------------------------- > > Key: SOLR-15578 > URL: https://issues.apache.org/jira/browse/SOLR-15578 > Project: Solr > Issue Type: Improvement > Components: Server, v2 API > Affects Versions: 9.0 > Reporter: Marcus Eagan > Priority: Major > Time Spent: 2h > Remaining Estimate: 0h > > A committer raised the idea of a supporting HSTS protocol and I think it is a > good idea. We can add it somewhat easily as an option. -- This message was sent by Atlassian Jira (v8.20.7#820007) --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@solr.apache.org For additional commands, e-mail: issues-h...@solr.apache.org