From a2f550e5676adaf9a56e77c4c343084793de3d34 Mon Sep 17 00:00:00 2001 From: Holger Just Date: Sun, 7 May 2017 13:19:49 +0200 Subject: [PATCH] Remove HSTS for subdomains for now --- source/.htaccess.erb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/source/.htaccess.erb b/source/.htaccess.erb index ef48964..efffbe4 100644 --- a/source/.htaccess.erb +++ b/source/.htaccess.erb @@ -39,7 +39,7 @@ Header append Vary Accept Header set X-Frame-Options "DENY" Header set X-Content-Type-Options "nosniff" Header set X-XSS-Protection "1; mode=block" -Header set Strict-Transport-Security "max-age=31536000; includeSubDomains" +Header set Strict-Transport-Security "max-age=31536000" # Have some fun :) Header set Made-With-Love "In Berlin"