http strict transport security on apache

Question

I could not find one topic on HSTS here on askubuntu.com yet so here it comes:

I want to setup HSTS so that my webserver will force the browsers to use HTTPS.

Does anyone know how to set this up for apache2 in a proper way?

Dennis Kaarsemaker · Accepted Answer · 2012-12-05 23:27:48Z

1

It's really yout application that should be setting this imho, but you can use Header set to make apache do it:

Header set Strict-Transport-Security "max-age=31536000"

answered Dec 5, 2012 at 23:27

6,85426 silver badges38 bronze badges

1

Thats also what i tried and i can see that it is implemented in the http header but it is still possible to go to address.com so it does not work?
– dhojgaard
Dec 5, 2012 at 23:56

Add a comment |

Mayur Bhandare · Accepted Answer · 2018-04-04 05:14:37Z

0

Its Really simple you just need to add one line to your .htaccess file on server

Header set Strict-Transport-Security "max-age=31536000" env=HTTPS

Thats it

answered Apr 4, 2018 at 5:14

Mayur Bhandare

5,1651 gold badge10 silver badges9 bronze badges

Add a comment |

2 Answers 2