AnsweredAssumed Answered

HSTS headers are present, yet is not reported by SSL Test (bug?)

Question asked by Zoltán Halassy on Jan 23, 2014
Latest reply on Jan 28, 2014 by Ivan Ristić

https://www.ssllabs.com/ssltest/analyze.html?d=officedepot.hu

 

HSTS headers are present at HTTPS, not at HTTP. HTTP requests redirect to HTTPS. It's also strange the report says the page returns 400. I can see a few 400 in the logs, but I can the same 400 requests on a different server, yet it detects HSTS and 200 status code properly.

Outcomes