According to the RFC, the Strict-Transport-Security header must only be sent with secure HTTPS responses: An HSTS Host MUST NOT include the STS ...
確定! 回上一頁