MDN explains that the Strict-Transport-Security header tells browsers to access a host only over HTTPS, and that on future connections the browser will not let users bypass secure connection errors such as an invalid certificate.
https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Strict-Transport-SecurityThe full answer on HTTP security headers is on the blog:
https://aiwebpageseo.com/blog/what-are-http-security-headers-hstsWhat max-age did you start with, and did anything break when you enabled it?
No replies yet.