Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [hsts]

The tag has no usage guidance.

0
votes
0answers
22 views

Transport header security header (HSTS) is not working with Internet Explorer 11

We are using a self-signed certificate in our application & want to use HSTS header for added security. We access our application using ip or hostname. I found that for HSTS to work, - no ...
1
vote
1answer
141 views

How can I circumvent HSTS on an intranet subdomain?

So, I have control over a small webserver that controls a subdomain of an intranet domain; the domain has HSTS turned on, so I can't connect to my subdomain via HTTP; I also can't use self-signed ...
0
votes
0answers
50 views

How am I supposed to reach a captive portal's login page when all my favorite sites use HSTS? [duplicate]

So I wanted to use the WiFi somewhere with a captive portal today. No problem, right? I'll just open my browser, type in www.google.com, and see the login page for the WiFi. Wrong! My browser wants ...
1
vote
1answer
2k views

Disable/remove HSTS for a website in chrome

My https not supported website is getting re-directed to https by default. I tried removing hsts entry from chrome net-internal settings but it does not work & the redirection just keeps happening....
0
votes
1answer
2k views

How to prevent nginx from sending Strict-Transport-Security header?

I recently added https support to my site with nginx reverse proxy. I do not have add_header Strict-Transport-Security ... line in my config. Even then, I see Strict-Transport-Security: max-age=86400 ...
1
vote
0answers
715 views

'Your connection is not secure' on google after update

After update to the latest version of firefox (52.0), when I enter on google.com* I get: Your connection is not secure Without the chance to add an exception. Without luck, I tried: Delete cert8....
2
votes
3answers
2k views

HSTS not working with Chrome

I have configured Apache to return HSTS header. When connecting to https://lab20.example.com from Google Chrome and running with developer tools I can see the following response header: Strict-...
0
votes
0answers
115 views

can't access a web-site with HSTS in SeaMonkey

I'm having MitM, and some stupid websites like Hacker News which have managed to install an HSTS policy prior to MitM can no longer be accessed from SeaMonkey/Firefox. Without HSTS being installed, ...