http strict transport security

[ttttim]

Someone recently pointed to me that I wasn't using http strict transport security header. From what I've read it forces a connection to https instead of http. Is there a different compared to the use of the default method from the ProcessWire .htaccess?

RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

 

[adrian]

@ttttim - have a read of this: https://processwire.com/blog/posts/pw-3.0.135/#step-4-decide-whether-to-to-enable-hsts-section-9f

[ttttim]

Thanks for the reply!

[dragan]

@ttttim This module was just released yesterday... maybe take it for a test-drive?