263
edits
Changes
Jump to navigation
Jump to search
Line 43:
Line 43: − + Line 54:
Line 54: +
→HTTP Strict Transport Security (HSTS)
===HSTS Configuration for Common Web Servers===
===HSTS Configuration for Common Web Servers===
Departments are encouraged to use the Mozilla configuration generator in developing HTST headers, referenced in Section 5, above.
Departments are encouraged to use the [https://mozilla.github.io/server-side-tls/ssl-config-generator/ Mozilla configuration generator] in developing HTST headers, referenced in Section 5, above.
<br>
<br>
===Additional References===
===Additional References===
# [https://tools.ietf.org/html/rfc6797 HSTS Spec (IETF)]
# [https://tools.ietf.org/html/rfc6797 HSTS Spec (IETF)]
# [https://mozilla.github.io/server-side-tls/ssl-config-generator/ Mozilla Configuration Generator]
# [https://hstspreload.org/ HSTS Preload]
# [https://hstspreload.org/ HSTS Preload]
# [https://www.owasp.org/index.php/HTTP_Strict_Transport_Security_Cheat_Sheet OWASP HSTS Cheat Sheet]
# [https://www.owasp.org/index.php/HTTP_Strict_Transport_Security_Cheat_Sheet OWASP HSTS Cheat Sheet]
