Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

HSTS Cookie #133

Open
Frige1 opened this issue Sep 25, 2018 · 1 comment
Open

HSTS Cookie #133

Frige1 opened this issue Sep 25, 2018 · 1 comment

Comments

@Frige1
Copy link

Frige1 commented Sep 25, 2018

Hey,
maybe i missunderstand but can someone explain me the usage of the hsts cookie?

Options:
hsts: true,
hsts_domains: ['/php/hsts_cookie.php','',''], for example a 4?

or how i have to setup the domains?
What i have to do for the hsts_domains[]?

@SleepProgger
Copy link
Contributor

SleepProgger commented Oct 31, 2019

A year later, but hey better than never:
hsts_domains needs to be an array containing the path to multiple urls to /php/hsts_cookie.php or equivalent server side script, each on its own domain.
I.e something like ['http://hsts1.foo.com/hsts_cookie.php', 'http://hsts2.foo.com/hsts_cookie.php', 'http://hsts3.foo.com/hsts_cookie.php', ....]

Each domain can store one bit of information. So if you want to store a 32bit integer you'd need 32 domains, or a wildcard domain. (Nowadays easy to get from letsencrypt)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants