Page MenuHomePhabricator

Increase HSTS Preload header to enough for inclusion
Closed, ResolvedPublic

Description

We offer SSL on all systems managed. It should be safe once the world switches to CF.

It is currently set to a month. It should be 1 year.

Do not do without everything being on CF.

Details

Security
None

Event Timeline

RhinosF1 triaged this task as Normal priority.Sat, Feb 6, 1:48 PM
RhinosF1 created this task.

I'm going to increase all proxied domains now to use the proper HSTS preload. This will affect all of *.mirahezebots.org

I'm ready on Monday to add redirects for the old domains.

RhinosF1 claimed this task.
RhinosF1 changed the status of subtask T177: Ensure all services use CF proxy from Open to Stalled.