Bug#832920: HSTS

2016-07-29 Thread Julien Cristau
On Fri, Jul 29, 2016 at 11:54:45 -0400, Hanno Böck wrote: > Please also add an HSTS header to enforce future connections to be > HTTPS and avoid SSL Stripping attacks. Can't add something that's already there. $ HEAD https://www.debian.org/ | grep Strict Strict-Transport-Security:

Bug#832920: HSTS

2016-07-29 Thread Hanno Böck
Please also add an HSTS header to enforce future connections to be HTTPS and avoid SSL Stripping attacks.