AnsweredAssumed Answered

why do I get HSTS unknown (failed HTTP request?)

Question asked by Pierre Chiu on Jul 14, 2017
Latest reply on Jul 14, 2017 by Bhushan Lokhande

My site is https://accertaworx.accerta.ca. The response header contains these lines.

  1. Strict-Transport-Security:
    max-age=31536000;includeSubDomains
  2. X-Content-Type-Options:
    nosniff
  3. X-Frame-Options:
    SAMEORIGIN
  4. X-XSS-Protection:
    1; mode=block

Could someone tell me why HSTS is failing?

Outcomes