AnsweredAssumed Answered

HSTS not correctly detected

Question asked by Matthias Fenner on Nov 16, 2016
Latest reply on Dec 6, 2016 by Matthias Fenner

Why is HSTS not correctly detected if there is no http service ?

 

We have a site which is only accessible via https.

 

http is disabled for security reasons. Why do we not get an A+ result in the scan, despite the fact that we have an hsts header ?

Outcomes