AnsweredAssumed Answered

HSTS Not Detected

Question asked by Jon Heal on Feb 2, 2018
Latest reply on Feb 5, 2018 by Bhushan Lokhande

We have a server with three sites. All are configured identically to send this header:

 

   Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

 

 

SSL Labs Server Test detects HSTS on one of the sites: gain.fas.usda.gov

It does not detect it on the other two sites: edds.fas.usda.gov or fastrak.fas.usda.gov

 

Any ideas?

Outcomes