5 minute and 1 week HSTS policy max age options

bsnowden · February 3, 2020, 7:09pm

Hi,
I would like to request 5 minute and 1 week HSTS policy max age options. Currently the shortest option is 1 month which is too long for testing purposes. hstspreload.org recommends stepping up from 5 minutes > 1 week > 1 month.
Thanks

michael · February 3, 2020, 9:58pm

I’d like to see a 2 year (63072000 seconds) option as well, in line with current hstspreload.org guidance.

Topic		Replies	Views
HSTS header max-age for testing Feature Request Submitting & Feedback	9	3696	January 13, 2022
Raise HSTS limit to two years max from one Feature Request Submitting & Feedback	2	2340	October 10, 2019
OWASP recommends HSTS max-age=63072000 recommendation Rules	6	86	July 11, 2024
Disable HSTS where I dont want to wait the max age Security dash-ssl-tls , dash-getting-started	32	5060	July 17, 2019
A good rule for Rate Limiting Security	1	1841	July 10, 2019

5 minute and 1 week HSTS policy max age options

Related Topics