How to enable HSTS Strict-Transport-Security rule in .htacce

ISAPI_Rewrite is Apache mod_rewrite compatible URL rewriter for Microsoft IIS
User avatar
Posts: 8
Joined: 22 Sep 2013, 04:50

How to enable HSTS Strict-Transport-Security rule in .htacce

24 Sep 2020, 05:09

Please help me with this urgent issue.
A PCI scan on our web site has failed.
Reason: HSTS Missing From HTTPS Server

Can I add a rule in the .htaccess file like this:

Header always set Strict-Transport-Security "max-age-31536000; includeSubDomains; preload" env=HTTPS

User avatar
Posts: 8
Joined: 22 Sep 2013, 04:50

Re: How to enable HSTS Strict-Transport-Security rule in .ht

11 Dec 2020, 11:13

I can't believe there have been NO replies since 24 Sep 2020
Maybe this Forum is now dead?

Anyway, for anyone interested the rule worked for me:

Header always set Strict-Transport-Security "max-age-31536000; includeSubDomains; preload" env=HTTPS

Return to ISAPI_Rewrite 3.0

Who is online

Users browsing this forum: No registered users and 11 guests