Merge pull request #139 from cdchapman/hsts-includeSubDomains

Fix capitalization of includeSubDomains
This commit is contained in:
Andy Dawson 2016-06-08 09:25:33 +02:00
commit 4300d7d402
1 changed files with 1 additions and 1 deletions

View File

@ -34,7 +34,7 @@ keepalive_timeout 300s; # up from 75 secs default
# This header tells browsers to cache the certificate for a year and to connect exclusively via HTTPS.
#add_header Strict-Transport-Security "max-age=31536000;";
# This version tells browsers to treat all subdomains the same as this site and to load exclusively over HTTPS
#add_header Strict-Transport-Security "max-age=31536000; includeSubdomains;";
#add_header Strict-Transport-Security "max-age=31536000; includeSubDomains;";
# This default SSL certificate will be served whenever the client lacks support for SNI (Server Name Indication).
# Make it a symlink to the most important certificate you have, so that users of IE 8 and below on WinXP can see your main site without SSL errors.